{"type": "bundle", "id": "bundle--7b5880dd-6b64-428e-ade3-c5e42afd49dc", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--bedd50fc-91c6-4cbf-9691-fb327893c9b8", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--572f1b43-2bb3-4bfc-902f-790130c33bc1", "name": "Reverse Proxy (Perth)", "latitude": -31.9505, "longitude": 115.8605, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--ea14a19f-862b-4dc2-8b0c-8751708b2127", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--e71bb554-b226-4bb5-87ef-51fb83eb6324", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--01607549-b051-4747-8c0b-4de65eda3f33", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0005df2-889f-4b86-9cee-fa3bf325951c", "relationship_type": "located-at", "source_ref": "infrastructure--01607549-b051-4747-8c0b-4de65eda3f33", "target_ref": "location--bedd50fc-91c6-4cbf-9691-fb327893c9b8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--69c58d20-2f49-40c1-9467-72030f202559", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--8f2d87b3-a558-4406-8b17-382f9037569e", "name": "Reverse Proxy (Perth)", "infrastructure_types": ["firewall"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a89f546-a281-4a6a-b3fb-feb6f68d63a2", "relationship_type": "located-at", "source_ref": "infrastructure--8f2d87b3-a558-4406-8b17-382f9037569e", "target_ref": "location--572f1b43-2bb3-4bfc-902f-790130c33bc1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--7d9081b3-dc6d-41d6-8d5f-5a5fb6e53b3b", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bec10b8-cb5b-4a83-95dd-3f691f5e1543", "relationship_type": "located-at", "source_ref": "infrastructure--7d9081b3-dc6d-41d6-8d5f-5a5fb6e53b3b", "target_ref": "location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--6e02a65e-bae9-49c3-ba79-ea0562aaecaa", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1bd0d42d-b591-4895-812d-a754064ace72", "relationship_type": "located-at", "source_ref": "infrastructure--6e02a65e-bae9-49c3-ba79-ea0562aaecaa", "target_ref": "location--ea14a19f-862b-4dc2-8b0c-8751708b2127", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--c81e14e0-c6e8-4463-9ffb-b98b2c6a5160", "name": "CVE-2002-1149", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--ff159f14-b1a1-4359-822f-45941adec36e", "name": "CVE-2019-0193", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0193", "external_id": "CVE-2019-0193"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--b4c1dece-ddb4-4491-80dc-4a235237b191", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--30006960-b601-44b9-9dd3-c99dfb017c05", "name": "CVE-2020-5902", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-5902", "external_id": "CVE-2020-5902"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--78e0c24a-2cd1-472c-a9cb-5e772efcc568", "name": "CVE-2021-21985", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21985", "external_id": "CVE-2021-21985"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--f74fff85-2722-4526-9342-7d2d2b0f8db8", "name": "CVE-2021-22005", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22005", "external_id": "CVE-2021-22005"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--15c116e4-e347-499d-aeb8-c5049d6663ac", "name": "CVE-2021-26855", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--1d2607e4-d6eb-417d-b015-b94ebe505ef7", "name": "CVE-2021-34473", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--ae9173a6-de5f-480e-9c65-11bbd60b77ad", "name": "CVE-2022-22274", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--a2257583-2ae2-4920-8e5f-444787dcd26d", "name": "CVE-2022-22947", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--6438735d-4dc9-465f-aa37-42f44bbddec8", "name": "CVE-2023-0656", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--68115e2a-3a12-4f80-b6b0-bc97e211ee1b", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--51fabef0-a353-4d32-b8ff-98e2d3756318", "name": "CVE-2026-9198", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9198", "external_id": "CVE-2026-9198"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ccf3d1d2-e476-4ce7-bcdb-4aa7379c0125", "name": "Network Service Scanning", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1046/", "external_id": "T1046"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f2335446-3f27-4b9e-aa8b-89a8cfaf2ec9", "name": "Exploit Public-Facing Application", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1190/", "external_id": "T1190"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--711771cf-7c5e-4400-8a3f-98333c379d2b", "name": "Credentials in Files", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/001/", "external_id": "T1552.001"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--2099f92e-22d5-4f56-830c-a0f433029f77", "name": "Cloud Instance Metadata API", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/005/", "external_id": "T1552.005"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--59afba05-d656-48d7-803b-b3f491ed7e6c", "name": "Container API", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/007/", "external_id": "T1552.007"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868f776f-0b0c-4076-9290-556b8b7e9e1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.14.110.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2e54ea-4b29-4633-974d-3d9a8e098de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.34.230.160']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2053828-36de-4b97-9d50-7612875f7c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.55.123.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181655b4-8e0d-4676-ba8d-402f2a9fcd4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '10.133.130.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412f0df3-8f36-43e7-b353-6308914a9761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '10.200.1.105']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1c5eee-66ef-405a-9e5c-5aa0404c04d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.26.98.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95aeab8f-a5e5-4acc-981d-60ca76c256b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3402eb96-4221-46f1-85a2-abfdcd25740f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91486b87-f10a-4b54-9e9c-3118aadfd38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf55d12-0524-4a6c-9dca-f4b5d0888fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723f306b-778f-4a87-853a-f77324f35285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.119']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9cfe24-c0ce-44c3-b3e8-8346bb8b06bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef94781e-1be1-43d5-aac8-a6378a42a729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b30254-5446-44a5-b15b-8a571b5f1b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057bb10d-86e2-4a37-ba1d-973c6bbd93c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdf176b-0aef-41e7-aabc-0b347276326e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075aef4e-16c0-4ebe-85b9-6e62b602eff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561f0f53-9ce9-47d9-af2a-1cbe988a2f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc5a9d9-b2fa-4cb5-b235-dd02ce50eab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71962d9a-9b42-4923-9591-3ef98d0e043f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.60']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7ba78b-c085-4d42-9316-5ad6b07527b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c33c882-0fd6-4523-8ab3-a405d5fe8d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90651a7c-3472-48ae-aed6-616a078611c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8c8abb-aa52-4421-b5fe-c6112a234724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.81']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b08b104-f1ee-4b77-a017-2095885b7314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea8593f-05f4-4e2a-9f4f-51e78d1c81fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fe703b-1a58-4a65-b941-fac2590ac6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9fd892-19e5-4a1f-aff1-c923c387e40c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.55.80.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db238ad7-54a1-46cf-b6e7-ac9ac6998819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.59.45.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40053316-ca19-455c-8e65-84f041f7ee07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.108.51.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f378a8-3660-435e-97c1-4e4c9543d45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.201.67.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e17d40-298c-4ce0-ad67-bc6087c7fbed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.24.233.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d720b62-6c90-43f6-8110-b78c022c9ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.208.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958ad5a1-0bc8-4fb5-88b9-82ae45e13a75", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.66.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbef4253-8a34-42b1-ab00-75ea909d2b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742acde4-177d-4d34-9e11-0b58fbada6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28977ed-a8f5-460d-af23-202bb3ad6177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b87b6d-ee26-41a0-92e2-536df1263807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e8cd24-d1a8-45ec-8893-387fc1dfad7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ffb78f-5aff-4fa4-bf48-40f345273fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3689e7ed-bc96-4f80-b1b3-c7451173e1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d72521-cf6f-4c7a-8930-85f128d66713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e48cd44-3da5-4800-b678-40eaec6f9cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eacb40e-1c61-43ad-9982-d47fb750199b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26a54e2-e3c9-4828-8673-be2199ac4d79", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.116.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04113cf-e761-464e-869c-c813d08c0b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d64b9c-5ee6-4ea4-96f2-7c4ebeb34f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad19910-3bfd-4218-84f6-4d7affc0f0a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a3e8b7-3f66-4c9d-9420-e7c31ecd91f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cd5b9c-81fe-46f4-a723-d13d65a9886e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f318b7c5-1568-4486-9482-f979c66fd67d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.19.205']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d252c5b-f0fc-4074-9db3-d95f1c86ff8e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.229']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19723313-4e08-461e-bbd1-c92709deb1cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.20.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ee6614-0b10-4fae-bcea-0111ceb0801c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.53.224.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b555f0e9-5cb1-4558-8ab0-4cee30b36acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.68.5.152']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83554d9c-b1cf-42e0-ac1e-a1836bde13ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.71.35.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6f8106-23bb-443f-aa5d-e41943bce2e2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.193.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce4a6c2-9569-4f8b-b18a-5ceb32896ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.161.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e96aa2-76c7-467e-9fcf-c8c52e3c710b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.37.22.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8279ec25-c3d0-43c5-8226-e2ec5883a0b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86807003-afc3-4c22-8e5a-978b078955c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.100.211.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7696cd-0400-4229-a1a1-84e8e52944f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.105.86.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36c6dac-662e-4a26-bf7e-f3e86d3b68cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.116.58.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7738f304-5afb-4b67-a29e-d62c2ccb5873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.29.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc715cb-31e7-457a-aec3-d5f2fdd72519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.221.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019ed6ba-734d-465f-914c-541490c1417d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.126.161.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc2f558-b294-48c7-bd99-d3ba8b9e962d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.134.251.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4cc913-2baf-454b-acac-aaa7d0fdc16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f14199-085a-4357-b04f-7053aae9ad3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca8bbce-8195-4ce5-a9c6-f38db11f114c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.147.157.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c356870-80ac-462c-a0d8-c696a0bcc2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.170.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f08c566-bf87-4b03-9abb-8c09af95bd91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ec4530-5505-4f55-9427-9a6ae8e246cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.28.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc036d9-265d-4a97-ac1f-76e56cb6421c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.183']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5890b305-f690-44bc-aca3-e5ea6593c4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.101.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9357716d-60cb-4c42-b3b0-48c681274408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.101.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e747146c-2fe8-4dbc-8275-36b2a099694d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.211.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fcbeaf7-8483-41be-a16b-530d4526d6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6b208a-1592-42cb-8adc-9bd289e31c47", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.159.85.90']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7beae1db-a207-4ca1-981f-cc7511329947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.160.4.229']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc3ffb1-bdf3-468e-a3fc-36d5b82539e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.163.182.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7472b13f-3516-45cf-ac99-a46e90e8f84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67417d30-437d-4299-af0e-6409db2a136e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206ab8cd-52b6-4a56-827b-f6ee3f123b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860e2a1e-94b0-4316-9a6a-eb9a50766cd2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.180.134.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87712eb1-fe58-4fb5-83b2-df7f9e2ea945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.185.223.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2225319e-b792-4846-9dfe-2120a5d35dc0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.197.71.1']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc60a7f-c284-4e7a-9cd7-efa7ad8de46f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a832db-42bf-408b-811b-dadd9666b7f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.59.0']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6bab8d-3e22-4b1b-8c9b-bba1c15946c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.59.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd7c11b-566a-4b27-a5ba-a8e4dab05a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d220acc-e4f7-47f0-a6a9-d7d84067cb78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.213.95.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d00fbd-8f50-42ee-a0dd-488013b7ef2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.215.74.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--729b852e-cba2-43de-ac1d-cf6601d8ae4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340718f2-d33d-4635-95f1-3160d0cfe762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.221.223.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f344ce-5857-4103-876a-d69d4902e09b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ab6088-5819-4da1-8311-03214f3ce3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcbf2d33-43d0-4b3f-bacf-aa7ed7fc0077", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.236.85.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8c8f19-8162-41b9-9ca4-fdd6fc488825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.236.97.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0523a20-63a5-40d3-951d-25d24eb6c9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3005d3a8-9d9c-4b10-953e-149dd81a6d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70d1e27-db22-444e-be8a-765368404892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6477470-1982-4149-851e-d40d71f2c554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.30.115.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb100e3e-d3cd-4d46-b6cb-8bf4eec23ce7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.31.11.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d82255-66e0-462e-be5a-3927bbdd1747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.48.194.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3b71de-6d34-4607-8ca9-3f3eedaf20f5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.49.28.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a90783-a7a3-4566-826e-46703b8324d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.183.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f23663-6143-4982-8dfe-97aaba565efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.175.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e390006-b759-4af4-859e-1c0f7f62a9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.132.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbbd873-fae5-45e5-8e89-873f8e8cf4ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.189.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5f841f-7fad-4c4e-8f3b-0e6a94dc7716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.20.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e129462-09fb-4253-9d55-148fc325e772", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.26.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab0788e-d0e6-4c60-9884-628bd7abd1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.36.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab7c28c-8485-4ba5-aa10-efdd1ff8823a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.88.232.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aeb9039-7829-46f9-9a7f-084e6aaa6ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ef0e2b-8f01-4bda-ba9d-ee9518a98657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4acfc4f7-5309-4900-adeb-b64ea61c695c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c81634a-fa6a-42f5-bcd7-84d32c3bc6c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c515b329-0b01-4d9d-9445-6cd9f71d4858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.35']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a4acb0-938a-4948-a7d9-c5938d2ee1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f4e3a3-37ec-48d9-9cef-6f3a99ba2b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c9da1f-92d2-4784-9f4d-c59bc47b06b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05642ed8-350c-40c4-931a-cbe53a8ada7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.205.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e88429-e735-4502-b601-d144ca6e9058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.205.62']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8463da-3f19-41d8-b15f-dc319728170a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.77.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a2b2c8-2c95-4607-a41c-e621d4894e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.149.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea47da57-f426-41fe-abf0-5b9967fefadf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.114.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9887bb36-7d72-4596-a794-be06ecb25b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.140.148.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8798cc9-786c-4b12-95c2-7dd005a4977f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd80cc0-dd2c-4664-beea-84040207e085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7936b711-0905-42eb-b6e6-a72082901e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65e860c-8f4c-472a-8582-15fb0b0c8c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09584c01-14de-4e8d-a793-46e95656fae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97abdbfa-f6bc-46da-a467-80e11e861e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.168.156.183']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65df9b5-7f36-47f8-bc20-8ad2f292349c", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '104.196.53.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b527590e-c727-4e84-9ebe-c576b2c73b77", "relationship_type": "indicates", "source_ref": "indicator--a65df9b5-7f36-47f8-bc20-8ad2f292349c", "target_ref": "attack-pattern--2099f92e-22d5-4f56-830c-a0f433029f77", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--754ddc8d-2a91-4586-8ced-5e64ad6adb67", "relationship_type": "indicates", "source_ref": "indicator--a65df9b5-7f36-47f8-bc20-8ad2f292349c", "target_ref": "attack-pattern--711771cf-7c5e-4400-8a3f-98333c379d2b", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51b02f45-b77e-4249-8466-95da88217ced", "relationship_type": "indicates", "source_ref": "indicator--a65df9b5-7f36-47f8-bc20-8ad2f292349c", "target_ref": "attack-pattern--ccf3d1d2-e476-4ce7-bcdb-4aa7379c0125", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40621de1-1514-44cb-827f-21efb042d075", "relationship_type": "indicates", "source_ref": "indicator--a65df9b5-7f36-47f8-bc20-8ad2f292349c", "target_ref": "vulnerability--a2257583-2ae2-4920-8e5f-444787dcd26d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09251ff7-3e52-433e-aa25-9e028e47a3d8", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.2.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a35d2e-4289-41c0-97a4-c3259a10ff77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.63.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee40ad4f-4585-40c4-8176-5e187995865e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.200.30.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc00557-902f-4905-b67a-81b0ffc77f17", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.209.144.33']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60a42dc-d7d6-4a43-90a3-d07253717620", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6d5dbd-11bd-4633-b729-c57b9b8ec041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722d0189-f5d4-4605-bde5-006b45f7415d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.169']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bee8c98-32e6-47ab-8358-0d55ca97fdc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a62e126-b34c-4c6b-99e9-5aa34d4eda1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8511498-63bb-4520-a7b5-e9885bd99900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bcad40-4712-4e9f-a6f0-b0f9cca069ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.94.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b79676-3270-4601-95cd-b6b84c47a3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.19.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886eaaaf-5552-4acd-800d-0d16e049d090", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.70.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a88bc1-4038-4630-a079-f04be1c33e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d372d6-1b45-41a8-b1ed-bce584597d61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.124.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dad34dd-7a1c-4046-b19c-9b69b2dce1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.105']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553c4738-486b-4248-a81b-fe47a94ddcd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.210.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725094a9-bb3c-43e9-9908-2ec103488c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.23.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e069a064-558b-4c92-aa0d-5e497300b4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.67.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2b1d09-c9bb-46a6-ac53-4d52f6d5dbdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51416a04-f785-436c-bdac-bc139f1376cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609dadc4-e036-4110-afe3-b47488415718", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.208.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7fe22b8-cb5f-4e43-a105-9c64dba027af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.188.93.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203b3a6a-7f87-4ecc-879e-7fe8a3f69513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.105.48.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58b2797-42f4-45af-8660-32cfe34289ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.112.18.31']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8548a144-0805-4773-b381-2078ff162dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.115.160.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d0cb02-8046-477c-8178-1495b5c727e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.119.165.205']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc061527-d138-4e5e-9804-0bf1f32a7fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.40.172.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e92632-daeb-4a77-85f9-365477d6d7c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.42.227.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c14870-15e1-41e4-9b99-e759b880e2af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.52.171.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3b1b63-47c1-4935-ab97-a3d8a0b9ce04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.59.109.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9492ed-ba16-4d61-b8f7-81ebb3a0dd56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.145.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd683c9-4135-4e0a-957a-4476caeb715b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.165.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d968a2-697e-4264-bece-ed163550a8c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.172.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a2b68a-d388-4fd9-836d-945e71dbd3ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.173.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab80176-74aa-482c-a229-90d36ea0ea49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7807b0a7-770a-4caf-aac6-5e31da46d6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441ad268-06d3-4d8f-a4e0-b95652b14423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.175.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779b2cf2-0f20-42d0-a8e6-1e1a07dd3b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.28.161']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49de56e7-581e-44fe-a303-3c8054785c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.9.211.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f3081f4-e8cb-4a41-be2f-4234b3a3366b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.11.76.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97b7990-b926-4648-897b-a2150ad03145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adcaeecc-e5f4-4660-859d-ea011dbaca94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce944a67-96f9-4c29-938e-e88c849990bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6fdbe7-ff1d-4542-b827-faed59a52328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2a387e-cd4a-4dc9-87a6-8b1fede7dd4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c7b328-92b1-43a3-af2b-5fab80895dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c02584-b12f-42b6-88c5-351901882130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af29ee55-b887-4609-b3a9-748791d55afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d32b95-ad90-469d-ad22-f8029a371943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c534e8c-8a6d-4c54-97a1-c4beacb88240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d2732f-1bbc-4c24-bebe-26be9ba836ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a1c1b4-2b9d-46be-849a-72a9dc28a36b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.120.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87ac026-e389-4f41-93db-aeb94d566490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30152e1f-1fc4-4785-a2aa-f28b30ac14b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.180']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcdc056b-b352-49c4-9f13-c184fc80434e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a591bd6c-c4d4-455d-914a-dc9ef31aa448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.252.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8099829e-c541-40aa-bd6f-08d08f7c7a09", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.17.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ebe0b6-8563-4599-832d-2e14a1f3b0b8", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.21.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0123233-7902-46ca-90f0-1046041fd0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.23.137.152']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0842a14c-bf37-47f3-ad1f-cb815b6e6edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.12.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657785a3-b4a8-439e-a1f3-2ad3b5793251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.147.60']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae466538-1c4c-497e-ba66-c9e079392e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.179.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6334fb10-1437-4718-9cb9-15b15d19b6fa", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186b77ef-17b7-48f8-b47f-09173f861ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.55.118.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f4fb00-b3e7-4a08-b5f4-50ef21607270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b8b898-fc2e-4cae-af43-79b08cd5cbb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.105']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4559b071-f9f3-4e92-b46f-1fd3930b67bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feabf009-98d5-4236-b08a-70350c91923d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7277a3df-1e2b-4b07-ae81-22b6e5189dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.237.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17a3376-f365-41b1-9c35-1d9ad2a63e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.238.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382e4d27-b6f4-4b43-add3-9e5c6d557ce8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.162.206.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740c61e7-af32-40a2-a00e-3826a47cfa31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.199.106.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd11da77-f6f0-497a-8179-3910bcf494de", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.200.152.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04470262-d41e-448e-b9a8-aba7c18398de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.180.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213ccab8-f291-4d6d-af98-a5938a35c07c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.206.247.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a230f474-dc68-417c-8070-98fbc08acc2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.94.87.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfc5b7c-d1e5-44c6-b925-08414a8cce16", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.244.53.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce4241b-0f97-431d-82f7-6f1d0602761f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.78.252.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e7bee2-5a9b-43d1-9517-bf0f90b4bdf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.126.81.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e9eb8b-c7ca-46bb-aaf6-81dca9758fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.173.159.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80cc0c0c-31b1-46d3-8088-a57d963304aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.173.159.81']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5cb80c-d3da-4688-a3c1-616cbb143aa6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.225.214.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe336a6-d017-4ec3-a5d7-8057e0dee7af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.242.6.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b8fa71-d650-4b63-a0c1-4fbd28cf4ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.246.75.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af3b231-b40e-4f23-b6d9-3fad96f9f470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.251.219.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1211ec9-8be2-4a7c-aef0-fdbda8a5c47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.33.20.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff88818-1f07-452a-8c6c-398672fc7d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.36.119.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409bd5f8-77fa-43c1-b3ca-17d831c1b724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.112.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2237d773-6f84-4c8c-b501-1ecdc1143c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.141.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cbd3b02-7261-47f8-a141-bab931adac7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.142.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0a9014-e222-40b1-ab3b-478b37123113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.63.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9507b996-50c5-4d6b-a3df-093143a46642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.63.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b8e69f-6e59-45d3-9b8c-7b6526a3df13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.95.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4099bc14-8add-496d-8e17-ae03e8a471ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.111.231.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7194818-6113-4fe3-8b7b-9f1ffa825a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.124.18.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35980afb-8011-4a5a-a7f4-2a0fad899b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.162.219.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00f3ca7-f56d-45be-bbcd-af88e3ab250e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.168.171.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f1db0a-4938-4c2c-a141-52eb37950d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.225.216.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da05b906-5122-4e55-83ee-ba9fbec23405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.229.159.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb600a8-182c-4f09-8bc4-4c7fc6a47bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.239.204.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2426009c-dbe6-4984-a60c-4d2a369ccff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.242.76.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c06c08-356d-48c6-9764-b57fcd277518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.247.77.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8d08b7-9778-4cfa-b1cf-45d7b60bba31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.250.225.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ab8428-0a85-494b-b801-f02ec225d4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.251.107.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b149b2e-7e6b-4643-9021-ce5806b0e10c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.252.99.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a327d9-37bb-44af-a2dc-24c9ed3f294a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.255.58.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0bd3502-6471-4895-b15a-5a43d16dc270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.32.205.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed6613e-f8a0-438a-b8f6-1173a90b1c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.36.10.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6895ebb9-685f-44ec-a844-e1b724e7ad52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.38.205.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67627644-02b0-4912-92fa-8d5e506095f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.214.174']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9777dc-81c5-4953-a445-7832670bafb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.214.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55cd2425-7dcd-4de0-8001-9be2c8e5c4d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.47.197.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd164e7d-ec7b-4b87-afa6-e39a63b5e567", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.7.159.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08321a96-4c4a-4d0e-883d-b1cc7a9502c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.86.225.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c1de9d-932c-4bc5-b536-0f27e227dc13", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.86.225.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7b1988-57e1-4814-b950-5d9bf56e14a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.253.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926dfca4-0b07-42b4-87f7-bf88c5b3b153", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.108.99.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cacc8069-e30c-49b3-8ec9-dfe17c213a08", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.20.8.90']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81e9139-7a4d-44dc-8af6-fb94a5df23ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.218.217.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da02cb73-9a11-4c9c-9f78-8b2485846c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.221.46.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c596687c-658e-4a81-b891-02b746cc2807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.57.185.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7656eb06-0d31-4c1c-a756-de00275ba8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.80.105.162']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b75bbb-0572-4044-a4ad-f253c38347ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fecacade-666c-4386-83cb-bcb32be63d45", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a654ad2c-0270-418a-a5d9-241fb7318276", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7b1994-de75-45f2-8684-0b7ffe2175b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691d82a8-cb6c-4865-8806-be2e83553708", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb06da74-0de9-4131-b405-720f9d771a25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b843d71-bedc-4dd0-a8cc-5855462f2646", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6cb92b6-f544-4bc9-a44d-c9aae978e5f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920a75f2-fad3-4b28-a195-8c84ab438a9c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c9eecb-b039-44af-b161-a58d516bd66b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b7e1ef-2da2-4856-8a18-f69faa563d0c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57072264-d6c3-406e-9042-b80834150703", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763d1a1e-3414-4209-9ca3-2b201f2b0af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.218.164.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac42cf5-1cf5-4ea5-b4bb-2949859f733b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.227.145.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec88aa9b-0af2-4029-8daf-93fcc0b73e35", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.252.186.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ff7916-bd22-4bf1-8388-f8251139a91f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.31.75.33']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43926f72-4e63-4498-adf0-c2fbdbb20d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.32.245.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7a0758-7fd1-4b23-896c-0019d2375024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.32.49.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a1a997-514a-4196-9d00-1c7e89cf4020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.32.53.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13032727-1cd3-4966-97d1-527d3cd20fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.112.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a1159d-f185-443f-99a7-14930e0c89cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.81.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a55d94f-a081-487b-9633-2a6225a8fe2e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e03d117-35f3-43b1-8513-7c5f32cc8195", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.178.75.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4efb328-5443-4d76-a9fa-6dbaceb803f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.244.156']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af096dde-9de8-4751-93fa-e70bab950b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.53.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90990850-8aec-4abd-a2d5-309b0b908d94", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.11.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb68ca4-3c8b-4fbd-a804-245397a348fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.215.9.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0418f895-72df-49a4-91e0-1612b93009dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.224.192.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eacc43f-f6ba-43e3-9f7e-bb84bd558900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.41.97.142']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c34f28-327c-493a-a996-66fafb1fbc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.51.28.222']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be27551b-ed65-4500-aa47-c57452a91218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.60.137.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee686a93-16bf-4c29-b035-69e3e59a573c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.61.86.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5895e8e3-8a3f-4c2f-80ad-33ca664790bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.75.187.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b55d69d-528d-40b7-8efe-4a3771ec23a6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.150.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95321d7-efa6-4f7f-9a56-f8eb6fbaba00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.147.109.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286ec209-4853-46ae-8132-5a183dd71577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.168.104.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad62e999-ae61-4229-a3ed-ae37c86da7e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24c3e72-c84c-4c6e-abb6-5186a792bf83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.209.133.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951d2314-7afb-4154-acd5-6e07ab536673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.255.226.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba91144-9304-4d13-8363-57685c1dc4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.34.26.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810a323b-ecb8-4832-b7bc-d8623478c4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.49.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd9d7b4-a4d2-4030-bfe3-fb84d7c6e621", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.152.184.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb38da8-9397-4fed-b543-9b0f836a271a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.189.168.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b048bdf-3bf5-4ef2-ad10-1d7c8900e3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.57.162.147']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7993559a-7a34-432b-a75e-5769ed651f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.63.8.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f6434a-8192-4ec0-b065-ac280348a47e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.89.185.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a9aed1-4bcd-4c39-9970-150fb01ff27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.9.1.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b75baf-a037-4246-90b3-245e1656c1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.107.41.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a28b195-5e8f-4203-8029-6b0a79348a69", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.131.69.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d037eeb9-e7af-48bd-a900-3bea1192d40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.142.8.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97a62c0-31fb-43d0-b42e-df90e470ba9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.104.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293ca1eb-c2d8-4cb9-8982-76afe9968757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9a4f33-3ee1-44b7-8dcc-6550dabe3061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2cab00-4d11-4630-b328-0d4826ba4c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df082f0-44a2-46bb-9d64-f50430d6a47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ae6724-7075-4479-af21-7ac32a14a7e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.39.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd918f83-017e-4f9a-acb7-8fc5ec826e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e1587b-b929-4680-982b-e7910acb26ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a497336-7c7f-4743-aba1-b5990c3168ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186ddb51-a6c1-45e8-8c6a-5d9ba9f86c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03eca8c4-82ae-42c2-a71b-1e7b58b7723f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4896fa29-f78e-46f2-a99e-253c06f42244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d03f81e-1b31-493a-bcb2-ee565065383e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be34ece-bcfe-4775-890a-8c1612fa00ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4039a8ac-ce46-4440-a134-0232477c55c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eee94b2-c8aa-4499-9be7-07da152ab7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32461b1-6ed3-4f16-ba58-5e6aaaf4ee78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d62c8b6-b2ce-424d-a47c-9627bb193d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19dd7d3b-abf7-485d-a37d-06fc6da1ea29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb9e693-1828-45ee-9c5f-89b2b3bd543d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.73.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25eca3c8-80eb-4b7f-80dd-de451b1f00cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5513a6e7-e584-40d7-b5e3-6c930c9ae47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0082884c-9544-4b8b-bf77-6bc121222b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceda3290-3fb6-4264-9e40-037f94b943a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43acc7a6-7145-4a87-aff3-d3eb92fef2d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.238.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69d188e-be44-4321-8581-9e9abc1a8280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887d92c6-8ad9-4b94-a370-03687b5c69c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d28ae39-4d81-46a6-bb2c-d95af617473b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69068eb3-7f1b-48a1-9967-ed6cee330382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290caee5-0d8b-41d9-8118-b0df97c147da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9612c5d-733c-4248-b94a-61185f8faf16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a40595-7847-4f6d-9085-710eeefd4463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.121.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15d3d9e-687d-47f1-a73d-f0d9c47b1988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270f67e8-05ec-406f-9aeb-75e121f05651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315d4388-3daa-461f-9b79-b3407de2268d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5ea46c-5520-4628-8925-cb822e4e2c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126500d1-c51b-476b-8632-71a0d323f30f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67266b52-749c-45e8-8a86-9ee5421c8862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669a41a9-a3f3-410a-88f8-34eaf4f265b1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272dfe15-18f2-466d-8258-6c6045eb41a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.63']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779e0a66-d20e-4d79-9573-ed179a2bf058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e592ae46-a267-4713-b928-5029c8e0cea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.38.44.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f177aec-1cc4-4e94-ba9d-86ca4d5a72e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.39.50.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81264a61-d112-4cbf-8f8f-c06ba8c84101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.99.82.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8910c654-91f6-49b1-b9f5-15486a9343c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.100.172.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6e509b-2303-487e-a6b7-0202cdaef2db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.152.228.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a5e992-1d1f-44ce-ba8f-75ced4a3aaf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.183.104.31']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3982d03-fbbf-4fdb-b9f4-4dec5cef4b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.186.32.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025d0daf-445e-466c-9876-81a0331cece6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.195.79.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e116e2b6-ca7a-4dd0-b7ff-5eb4f4de2e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.236.65.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbbeada-359c-40ef-b718-0785f35449b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.30.117.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97754f38-d123-4cff-8726-43bf53772cda", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.45.7.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86330180-5cd9-4c4d-a9fb-f21ce96fe5f7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.64.59.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867ae4c2-a19a-4a53-8b67-dd436bfe283f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.92.233.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aae8f5a-928b-4018-baaa-12ddde4c7265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.93.136.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a9d94d-158c-4d1d-9107-83256c6354af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.98.15.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848b5d64-a1d3-4088-88cf-0bd60af35ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.99.166.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6587b71-dcdd-4297-bbab-46d1e216e085", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.196.124.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea776dd7-c442-4287-a44a-1a2e870b7eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.203.131.80']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fb192e-85cd-4f04-91b2-14798f1ca0fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.207.40.168']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbf7340-451e-49e5-9e7c-c9257b1972b7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.211.134.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152268c1-ae10-4e7e-868e-7a6b9844bc3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.221.100.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0dd7a4c-71b0-4c46-b788-a5781ada14de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.225.66.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8028e7-d063-44e7-9f1c-3e546c564f10", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.227.95.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4248bc32-dd63-42f5-bc1f-a20b4a1c8d9b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.245.86.13']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48ee236-39cd-41fd-83ad-d66d0b42187a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.4.40.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19002b70-832d-4716-94a3-c0a6c80a26e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.78.173.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7f26dc-c29c-4644-bb13-cfe4b6101d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.84.12.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef73b67a-78f1-4522-862d-28d2bad2f7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.122.240.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc60762-4993-4f5e-afcb-77e6aa87b4f6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.127.233.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b831c928-b5e8-4c06-9a1a-1a9e2ada936e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.137.29.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87536f4-d85e-4220-8d9b-16b6f7447142", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.142.87.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b190711-e893-45f4-90ed-c56a0b59588c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.196.227.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b77d0ec-96f4-43cf-8728-30186e482906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.226.212.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c347508-3eff-4278-81eb-4a25f9c31d5e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.229.156.101']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f34871e-8e73-408d-9c4a-3ed2adb742eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.149.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd51a4f-0078-4de5-b733-7b8df5678ad7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.210.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c462184-4c57-4ad9-bdae-cfc3febee7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.57.2.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b98e8be-8ac4-411c-90fd-5938f280ff78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.61.129.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be876a06-d732-41c0-9e81-fa5702c97a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.61.139.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce548534-e31e-4bc6-b750-905c96e22012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.116.21.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43038bc9-2063-4c6f-b700-1ff40ce56793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.136.153.80']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c7609e-e7a8-4931-9c39-23f0c0015b49", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.166.252.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a033f7-07dc-46f7-97a3-10f2e12ed79c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.175.59.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe30ad7-c343-4601-bf80-a5a5b5654adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.176.54.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5b29de-ba0f-4608-9bc6-1185442d9ea6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.227.103.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e029b0b2-f8de-48c6-bd14-752a758c21ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.5.237.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537abec6-3fed-4371-a175-b06ed6b806d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.143']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9540d28-5faa-4b7e-8421-68b8f3dc74a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290ac769-def4-413b-b045-c9f580c2bfbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df56720-2165-454d-aaeb-f01bc0cea2be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.215.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81bf1364-4e1c-44fa-9742-c8f19fbfccb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.131.54.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8829d738-34a0-4a96-b29b-eab1ddcc4f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.133.222.105']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986a5d90-57de-4abe-a992-51491d8f167a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.139.219.255']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1270dd-c963-4620-a98d-2448482ab958", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.139.37.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce0936d-9af3-456b-b9c2-13187cc0744a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.14.196.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbba52b6-1b2e-4275-a879-10d7ab54009a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.146.57.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af39c5d-18dc-4516-8a67-5843e53cc6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.165.154.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c79128-4d26-4933-a16b-9b751ce9b09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.168.148.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6dfb78-f7b6-4ee8-b471-fff2069ccfe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.179.162.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7394705b-c6f3-4af3-bee5-a344701830bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.179.85.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bdf1f5-6a0d-4117-867e-03fbc6d244ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.182.196.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e4545a-680f-4b3a-b773-5f074577eae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.24.206.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1a221f-f03f-439d-acaf-cc70807fa5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.99.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c541aa-9206-4e06-8a34-dc7c278d4245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.106.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81dd4941-4834-4d96-9497-9e55952d2940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d8a1b8-eb64-4b65-921d-ebc2ebae890c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e71427-f207-4d3c-90df-c9ad4593a21d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb49c76-16e0-4f1e-be6d-c11b5208d8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7487a829-6f10-4d31-b1f8-9bb78e530920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e725f2e4-a688-4186-a929-136f8aa52f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.114.79.101']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191396b6-7466-4522-9a1b-b020b43ee37d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.179.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1efe15-7e0d-4835-b5a1-4e21b44c3f16", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.158.124.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173b962a-e497-4d3b-b0a7-61646436996f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.161.116.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be53709-dfd3-44e5-a94e-6e7d76ab937b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.89.90.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba75f204-9e27-4bea-9e8b-744cd7878e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.90.50.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8321f72b-d152-4574-9d55-465cdd0b532c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.120.94.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a14e37-a8b2-4cd9-8fdc-e44e352768d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.121.16.90']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39528d75-faca-44db-9b3d-7dd1f6c898f4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.178.243.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990595d7-fb54-4a29-9c86-4c0ec2e2cc8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.211.130.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764d56f6-9c96-4546-b224-592c10c09d01", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.224.229.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a0de01-2a5e-4f1e-aac0-6001fd8c97ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.228.207.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3191d1-87ed-4bc9-90ed-e664039bd83c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.31.2.160']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e24f383-9fcc-4507-88e0-49206654e91b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.41.0.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab107746-c321-4db7-a0ae-a7d710ff233e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.43.67.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f11d761-60b4-4784-8a94-3dfec1e02b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.47.180.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1254d88-4958-43ef-b799-c2d7780ebc2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.67.130.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc21c5f2-1aea-4039-aded-5c81ea85d254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.74.55.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bef820-d4a9-4d52-adaf-18d76c829bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.77.55.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9512bae8-544f-442f-9449-5a5702414df4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.88.225.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c434fc14-d56e-4ada-98db-9852615ffeca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a02ef21-715a-42b6-949b-773a22cba648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c879c5-596d-4854-a031-153a5d520cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.44.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77628c2e-0bce-451b-89f2-085404fcc4cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72fc4f0-e764-43d5-a05f-c907150eaae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e296d113-1e26-4dd0-87b6-6774a78b93e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ea3430-fc1f-4697-b504-23d231f80c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc30956f-310d-4dea-ab7c-083a1643fdb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2b1494-0153-481e-b1c0-7eee85368bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07267641-fd26-41f9-9f5c-332721a27058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644aab68-b454-4197-945e-92e728a97594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ce748b-a244-4df9-8c68-67d40fdf873f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.8.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e0c45e-06bd-4882-b3a8-960b7a1a8279", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.204.188.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feadca49-7019-4212-aba7-56f98563c775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.213.151.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51501823-513f-45de-90d0-94c7fa690d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.244.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db17b98-a854-4ef4-9a4f-503ab920c9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.222.2.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181a83fe-d877-4ce5-ba8d-f5fb00ee7ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.72.110.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c1d93a-8d7c-4624-8712-613cd6648523", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.72.73.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8901c242-1655-41fb-b36c-8532e5efeb09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.105.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a5aa2d-39ca-44dc-a9b5-f0554b092a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.120.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a0749d-1698-4dff-991c-4fb21559d5dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91db08af-3d0d-49a5-a667-0fd3dff80116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a407b39-dafe-496d-a169-b26089170f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9113bcae-98f2-43ff-afd5-1363dcbee1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e1046a-7049-4fe4-8a77-f1026481c8e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44064fd-c67f-4e16-bc44-2ac722b4820f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e1a8c5-4136-4689-a4b4-437a7080cdb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62dd453a-0da3-4b85-9cca-53709d7af639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c05178-7414-4ebf-97b9-4e7d0d196b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf29d0f0-abb3-498e-add3-5b6bb43ebbc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.185.238.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f41d49-ca63-4052-bfb2-5eefae35804b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.209.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bcd4b52-c5ff-4aec-b976-7d505f10ce66", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.52.105']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f758dc5-3430-403f-b660-a5b279bbb139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.196.197.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f939e908-c11e-4478-b8b0-0831aec70181", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.221.50.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b112a27-e540-4818-befe-0216558ee71b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.18.181.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b61b2d-5a7b-4aed-931c-b45adf46d718", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.126.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b68928-9140-425a-bf7e-5c9c81af357b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.159.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1c117c-ca20-44a7-97df-c31e8b96cc92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.203.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68256305-8985-4ad2-a30d-529a75c3d674", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.236.242.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e23911-8ac8-46a0-ad26-1e6587134342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.104.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8331611-cf15-419f-9ec3-252b45eabef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a01312c-ab74-4b98-b9e8-4be3bdf59b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11030ed6-a59a-4ed9-a52c-b4d55cb1fa20", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.12.247.108']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65997cc3-1f6f-4887-8f71-1a513bb36783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db0cbc1-0ea7-4951-9889-0523b2b095f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a48fe41-3217-4809-ac28-88d057e70192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3dba5c1-3297-418b-a096-810cf7d99780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79bab5d-a363-4fa5-97c2-c3f7e41e9d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.97.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771871c2-9119-4704-813a-52f9d1cea8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f634f73d-8b1b-4b00-843c-c6d2bcec445d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4680111d-219b-4805-b4c8-ea0a0fd48b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ec407a-e97c-401f-8a1b-3e9de83a4dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768be84e-8a9f-4779-95d3-c7126049cc4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f118f07-2c3d-4c81-b10f-dc189c212e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68b1704-8fbd-477a-9a89-120e3267931e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67620ae-8590-4201-b8b1-fd1b8de4cb4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26197131-cdeb-4409-8277-7eecd0ec6445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420a0398-dacd-48cc-8911-38fe0f208077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144ff69b-5f2a-480f-9b53-017429f02be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1adc8508-0889-4e26-86f0-365115c48199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64bbea01-ed32-486a-8e51-e0c0a76fbeda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6286650a-b84a-4c11-92dd-e335cf017c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d740ac-fed5-4ce0-8966-28c6ef7807b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.0.251.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f600c4-67a2-45f4-a8f5-16b2cfce7d14", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '136.108.89.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5e8b95b-a483-43a3-9adb-18c15b9954fc", "relationship_type": "indicates", "source_ref": "indicator--e7f600c4-67a2-45f4-a8f5-16b2cfce7d14", "target_ref": "attack-pattern--2099f92e-22d5-4f56-830c-a0f433029f77", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6905fb03-6ee2-470d-af39-a852ea3310d9", "relationship_type": "indicates", "source_ref": "indicator--e7f600c4-67a2-45f4-a8f5-16b2cfce7d14", "target_ref": "attack-pattern--711771cf-7c5e-4400-8a3f-98333c379d2b", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14cdbb8a-41ed-4d6b-aa06-3212e0b8c888", "relationship_type": "indicates", "source_ref": "indicator--e7f600c4-67a2-45f4-a8f5-16b2cfce7d14", "target_ref": "attack-pattern--ccf3d1d2-e476-4ce7-bcdb-4aa7379c0125", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d490f1e2-e93a-49f9-bb32-1dea0f14e56c", "relationship_type": "indicates", "source_ref": "indicator--e7f600c4-67a2-45f4-a8f5-16b2cfce7d14", "target_ref": "vulnerability--c81e14e0-c6e8-4463-9ffb-b98b2c6a5160", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2135c34b-b105-46f6-bc44-40ca0166657b", "relationship_type": "indicates", "source_ref": "indicator--e7f600c4-67a2-45f4-a8f5-16b2cfce7d14", "target_ref": "vulnerability--a2257583-2ae2-4920-8e5f-444787dcd26d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1fc8f4-7daf-4091-91f9-bf1d16b59465", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.111.88.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82110017-f8d1-4e17-89de-811325207dbd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.144.19.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8de283-ef66-406d-bacd-3f967f3b84fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.158.121.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdee662-d9da-4e1c-a888-bdcca027c4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.63.0.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb74c5b8-3a2e-4e4a-8274-977e98438d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.65.125.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d632199-11f9-49ed-9c6f-ebbb8ccb8f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.128.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47f93ef-09a4-45a4-8fe7-a277da4b00cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.27.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff08d791-2d63-44a8-97ff-58105a729681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.85.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae438f6-411b-46d8-81d3-9b7af1c641a5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.59.230.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3724c66e-9531-4703-9cb2-0b3531f21dc5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.63.148.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3fe9cc-3c4b-492f-9316-be8b13b0483a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.121.104.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb7498a-204e-4d84-947f-d3f762f25da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.100.1']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e591370-97a9-4e01-863d-644638820013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.31.169']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d0e585-8b79-4f9a-a6e8-36743f4fb2dc", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.186.107.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76c0324-ec83-4881-91b5-6f774c4dc2a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9022ec-eabf-4adf-9c87-8f2224403d0f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.37.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b877aec4-2197-4937-aec1-c655655a1bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.199.62.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05bf5b87-42fc-4dd4-ae89-ebb76ca00c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aaaa3ac-7026-4535-a3f9-6766682c3bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b035c89-24d6-42ff-b59d-7230671befee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d98645-c9bd-4d78-861c-798da11189fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.246.253.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91699486-bd71-4511-a9d6-560966011cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.246.253.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6331f0de-ce0c-420c-aa1d-0510606a1b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea62564-e330-4165-aa96-ed46bc09a651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae497651-0ca5-4fe8-bf53-c2b7b37c65ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9973bc68-cfde-4343-9c95-af36bf22150f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb7a632-97a4-40c0-8e02-b5052f0a909e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e891b071-c25e-4efa-b9fa-9f9b61a0ed66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b36b7b-1836-4d8a-8ee8-99c883715cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.159.157.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20be5a2e-13a4-4291-b7da-6903e9977830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0879b43e-9707-489c-a03f-05f6768a2cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26edc584-956c-4adb-88f7-ccf5ba307ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1913757-243b-46fc-8f87-73c73459b331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3161a544-3deb-456d-bb9a-2721e4eac6fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae83f539-31f8-4152-8c1e-c6f6b9711303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.209.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe412cd-7d80-4617-9055-e51c43d8125f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.79.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da47038b-43ad-49dc-a29a-9288814ccf7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.82.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3a92b3-2f05-4c74-bbcc-65af87acfad8", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.109.234.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9f25fa-44b6-40ff-b334-fece02ea8e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.116.219.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40c627d-93c3-46a8-8a90-9220d078832a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.238.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f592345-26c2-4d42-bbfa-bdaf4679dbd4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.247.51.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5588803d-dd85-4214-9d1e-589186231658", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.33.48.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b399bf5-bb8a-4eae-95f8-486cdcabed3a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.40.125.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c2dd50-5d33-44c2-8825-125d4dd42507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.47.200.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4175379b-1a0f-4b54-a922-a06f42c8cb03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.246.124.160']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e746e1-542f-45bf-b770-5b0e84ce80a6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.95.19.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd08eaf-25a9-4a42-879a-8f0ef08018a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.10.205']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ce8f0f-afed-4914-af74-84316799da6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.121.216']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be7e632-3a85-49cf-a10e-354fea26063e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.124.119']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320dc48a-9852-41dc-98e7-2347100e12ec", "name": "Malicious Host", "description": "Web exploits: exchange-ecp-proxyshell, spring-boot-actuator. CVEs: CVE-2021-26855. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.143.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b7d28e1-e0ca-457c-accf-96971407dcdd", "relationship_type": "indicates", "source_ref": "indicator--320dc48a-9852-41dc-98e7-2347100e12ec", "target_ref": "attack-pattern--f2335446-3f27-4b9e-aa8b-89a8cfaf2ec9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c21fb82-1ea4-4187-8b2c-c009059d68d6", "relationship_type": "indicates", "source_ref": "indicator--320dc48a-9852-41dc-98e7-2347100e12ec", "target_ref": "attack-pattern--ccf3d1d2-e476-4ce7-bcdb-4aa7379c0125", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2bd9fca0-b1e4-4fa8-bbbe-34cb588fac8a", "relationship_type": "indicates", "source_ref": "indicator--320dc48a-9852-41dc-98e7-2347100e12ec", "target_ref": "vulnerability--15c116e4-e347-499d-aeb8-c5049d6663ac", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d47adb6c-0248-4998-a955-fa8e6f4104cc", "relationship_type": "indicates", "source_ref": "indicator--320dc48a-9852-41dc-98e7-2347100e12ec", "target_ref": "vulnerability--1d2607e4-d6eb-417d-b015-b94ebe505ef7", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55fd0722-4285-463d-907a-0144db4070b9", "relationship_type": "indicates", "source_ref": "indicator--320dc48a-9852-41dc-98e7-2347100e12ec", "target_ref": "vulnerability--a2257583-2ae2-4920-8e5f-444787dcd26d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069313ca-22b5-49ae-9b08-d3024af5f381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f846262-e7f9-47ca-a30f-c1ef75c7f7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.117.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc8b259-7c49-441c-871a-b60d327b8a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.161.156']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd0f891-d396-45e7-b0db-2b92d6de4a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.171.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5e7681-f014-482f-9108-1f9af5cab43d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.40.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de43a6e-ceaa-44b7-a763-94ca1e679ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.255.242.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54df5497-86ef-4bc3-8075-deb2521d89be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991b613a-d6da-45a7-b455-e6483539c9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c16893-7d89-4385-9f70-0711f7be4386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d330ca-bc55-4037-aff2-f66fb5ecdef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fd228f-6bb7-4477-8d9a-8b0bc22ad6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43252102-ccf1-4e07-9edd-b3be31d106a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a22117-e942-4d35-a980-78d71ebe2539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd2b98d-dbee-462b-9fb5-df60963b9895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983cc818-4111-4dac-b6fc-f5111970bc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d1cc09-98b6-4c13-909e-a0d2dd51f50f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19160c8b-f2f9-47d7-8416-c0831c68868b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c8471c-bad3-4394-82b1-ff80747fb927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da90921-e57b-4158-8745-3e1759c40c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a606654-ae91-40ee-be6e-6c76d586e4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f67759-3a1a-4ecb-af75-c70bd7a8fb88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b1a45c-a15f-4b8c-ad05-5a835b01ad38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9a3507-44cc-4341-8d1f-8d05f09e3e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9265a39e-6b67-4bfb-a655-5306d9fdbf9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff4de22-1f34-48c0-961c-32abe40b81f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc95afb-b080-429f-aebc-c6265af3fde6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc85620-8670-4ee7-aadd-a4eaebbf6e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a05e8c7-8fb4-43b9-a8cc-83daa6462a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32adb6bc-f5c0-4220-83e7-ccfb440d40fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f603ba4a-9469-49e4-aca4-c29e1fd9fecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.124.192.205']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ae812b-a57f-438c-8626-0119111e053e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.124.192.90']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aded383-47a9-4b6e-be2e-5c62dc188972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.225.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ee92a6-0b05-46b7-bea2-37f91a82f742", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.112.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71adba32-350e-4413-a210-c6e421875bdc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.114.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c16d45-c322-41cf-bd7d-3ca8658928a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09af3de-b631-43e3-b3f4-3d15f6606096", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.79.205']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81609036-5ea4-4508-b2a6-ab3b755effbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.24.159.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2910a5-7afe-4fe7-b114-110ee7f6a301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.156.161']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af12ac7-f729-4dec-b423-c0540f7f9654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.185.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459c0630-016c-46ab-aea2-e43fd6f54649", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.135.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26449ccc-8dfd-4710-a082-142d26cc22e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40503b4f-18e0-4026-bf7d-aa0619495f5c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.95.229']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b1ff6f-82ae-4da7-a1e2-80bce03d64e7", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.220.91.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36292c50-e4dd-4180-bbfa-b7649b9e2ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.239.0.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2faa3dd4-ed1e-4987-8ae8-012c24de9f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.148.121.1']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c412ecbb-0717-4531-8346-81d1721a52a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.158.126.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d64a4bc-b64f-40da-a19c-356a711eafad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.160.227.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04546c90-7191-414f-a670-663e097c9d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.134.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598ebae6-cbe7-432a-bd42-b60c30962937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.21.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b034b59-64ad-4057-a78b-383c387fd339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.247.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23a32ad-b20d-420f-8852-9553dde7b671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.48.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46354ee-d138-47a3-87e4-9fa10615fb61", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.194.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695c30c3-35c5-4617-95f7-7564ef9f1521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.197.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bd29dc-2d6b-48e6-ba81-86aac8bbeb93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9229e43f-0bcd-4938-95ff-04cb3d007765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8668c01-b7fc-4fee-b120-a34c39d1e111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3af246-0685-4a22-b269-02d104d32d37", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4145bea1-0b8e-49de-975d-a94131a6fdcf", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53183c74-1d03-4907-9d96-4335c13a707a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69be109d-a45d-4f0a-a0cc-fe6ed9ace91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.139.136.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e162460f-c901-4cc0-9223-6f7d14610a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.154.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1842717c-2458-49a5-974f-1cfa3977cb34", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.228.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fec7dc-48ba-432b-9c34-62dc737726f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094da683-3970-456c-b0c0-994dd28fdc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4301673-fc1a-4de2-adc0-4717e9b00b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd32f61-07dd-4b14-a375-b0ed3fd25f04", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8d39ff-1a8e-4d62-b896-949c25dabc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4921e2dc-ba4f-483e-ac2d-5c56194b7fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c358e1a9-d7d0-46d7-9ded-2340f6c598db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03a0989-ccbc-4465-babc-6e190854693a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af22767d-f469-4d34-a665-64352147ccfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4cc76ae-3672-407f-b0bb-73d82c44252b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c170b7d3-facd-4f6c-8512-0fb170b2eeaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8503268-b40a-4d7b-b20a-0a016fdff49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31babf95-1475-4699-bbcb-83fc0a4a29a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebabf63b-c489-48ad-9216-c7c54a318f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80bf6064-ee3b-4e12-b546-5df350ba7e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728e3a91-fe2a-4c00-b3bf-e3640fd5dd9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1fba2f-e746-4145-a14a-18616aa16000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b59a6b-0612-4057-ad9a-3da816af90aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9cc18b2-d29d-4361-8459-94b98b0c0221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff489c3-d162-4efa-96d1-fdf453b2f5df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06766cd0-c2b1-4484-a1c0-255c7b6f4b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7f830e-7add-45d9-bbd9-1d403be71def", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a25b07b-3530-40fc-b92e-6ec8c2709236", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2a05c1-340a-49a9-9080-33afe1ac0a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a532706-afd7-4912-b23c-eeb9bee9affd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38661d39-be2e-4bfe-9c80-f1a6fd6658bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700cc82b-6e5f-4fea-a7eb-922161472aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84530693-2d3d-46c2-a2ee-c6307473cbe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5cfae83-e9be-49a7-93db-c7a457943355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca304a58-9f32-41e2-81c7-c6529addeb7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170a0e61-71b2-43ac-80b0-a830407c671d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.158']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c50a04-067c-429b-b706-55c5208a66ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110cfd08-2c62-4164-af19-d134ef04876f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364e500f-f047-43ce-80ed-cc65fb4a8064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.161']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69ca014-18cc-46e5-986a-7188d69aed18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33743066-14b0-4652-bfb3-70f7a2da0393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86a3625-2c71-4164-a902-fb75896c51d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2ce92d-d30a-4bba-845a-0fc5d839e9b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5edf3d4a-be89-4424-8d69-061333019f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6467fd01-b694-4cef-9c39-3feb91bccc88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12817fcf-698b-4f5d-baf4-4f644b9a7b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c614f5-914e-4821-9c2b-8683b2b10772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65eb83a4-cfd1-4b35-8368-02d27a0c3fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d677c7-d909-4ae7-9055-980925c73e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1925f99c-dc9c-447e-a0d3-8f3c38112291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.180']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9b9d5a-26de-4536-9b42-c3c6d171db62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d85136d-732c-4a52-9880-be1622709474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca0338d-09b6-41bf-844a-de3101cf2161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16848e0b-b393-4203-a12b-2735d09d374d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480337a8-1a0b-40b0-967d-5ecb13e50dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a643da46-a94a-428f-a2c5-08a7715d9076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa5b479-9df7-43d0-a2c8-6e9862eeebef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589a7da4-e503-4920-b5c7-7cada6496707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a17711-ac1e-4ab6-bffa-2cb58b5f38af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.200']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46846f46-df46-4428-8ba6-f23c1bf6a0be", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759d8b82-f3ec-421a-871e-3eb76fb64239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4d50af-8462-4b38-8bba-bbf4eb5274d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b0de8d-8e22-4e0a-ad15-5a978d9f3b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3998eded-d7f3-4bea-b20a-56796a669d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa0a47d-6f3c-48eb-a63b-b5f3362a2f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597a4ec6-761c-4e04-8fe0-8fdcfb8fbef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cac0c8b-07f9-40d2-b68a-318499fc2f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.216']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a417f08-c1fd-42e7-82e9-64b1a66b5ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d720b51-4c16-4d70-9dea-27307cc5d919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a421818-3256-42d6-9ab3-e36e4a163095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19cee452-711d-4707-8aba-743dbcffbc2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c863a81a-07c9-4cf2-9e96-2d0fbb19a230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa26b09-c3d2-4f83-9643-48b5ea5ee189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c294da8-17dc-4be1-a1cc-39f0f89ada66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a450f9a-da45-40f9-9633-5656206cbd91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9059e2e2-4989-422a-8a73-4f6ea26a0be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f27987-97eb-4a6f-8f33-c6f9e6ef104a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc75961-5e89-4556-bdb7-416ffed1b4ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553cbaa8-40c7-42a6-bca0-ceb58c6dcea1", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: digitaloceantoronto, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:openclawglobal", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baba7904-7e1e-4872-a61b-7d63d0cb624d", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d474e4d-d2a5-4ef4-af07-a40cc72d2391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ff996c-af17-4a6a-b369-31528a1ff51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed43ceb8-07b9-43be-afdc-4e99890654f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e28f51-578d-4b72-8d99-6519bf79c0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0aa920a-d14e-453d-9a1b-4e5f40a67fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5f0108-d211-4597-ac72-01f149d63c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9efd4645-821f-41d0-a4f3-6550124d1bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a33a13-f980-411e-abee-bb83f390cb63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451f2e7d-bde0-4f65-8a7b-9a53eb0e625a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe17649-2712-4bd3-98ed-eba05e876b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59a752b-617a-4b68-8609-be1fdc4f8836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.35']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ec4a00-fc4f-40c5-bb34-ac874bc7681d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756ff64f-e741-46c5-9c26-a9dbbd6292e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343aa50b-a1cc-4861-90d7-4fc10e8248ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df848a0b-2672-45b5-9a22-1f03f25bfa3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f42076-293d-49cf-81ee-3d7d10bab62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539c8702-8b1e-4a14-8891-c7f8c05adfe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41930d96-906f-41b9-ac55-a74e39ec19cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4cb7dc-e810-45b7-8d5b-b704c0418887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed18c23-56d4-459c-8c97-ff4d1b2db262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea12fb3-ca32-41bc-92d1-ab252d118283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a70102-5cfb-4014-9731-9afe3c299f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03f7fe6-fa33-4399-b07c-be9658d58105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838325ba-2458-400d-9198-a34fefb993c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0631db8a-52d6-43f4-b3f3-27412c9f7f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d50ce86-3086-4c98-8064-76f0a85452e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b2ce48-b88f-49f3-93d1-e7905ab9a563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd85763f-1ebd-4745-8cc5-50a4335d069c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2024d9-fb96-47c5-bcb3-f6864a120a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbf6d39-39f9-4df9-89bd-eeb19505d08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51ce5d3-3d15-484e-938d-b3a5d7c28120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3533d2-a089-48f9-8a36-2cb47c874093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3891bd47-a31f-4683-8fd1-bdb3f718766e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df92b123-868e-470f-8255-a223cfe4f05c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca169b47-68e3-408c-ac32-a24e3dd79e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197c5b7e-db45-4e0e-abe7-9e43dfbbb0bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807505df-c674-4612-9e43-9f071efdc5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65674a9-2d24-4c73-b41d-fef66f5ad33d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f01bd1e-cdf3-404a-b72d-b260e0800b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f9312f-71c8-46dc-be3a-56be9c4a85f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29236d44-35b1-4c30-9d7b-6de67f1fb038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30de750-a888-45cb-b157-09b80cff121d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b20edb-c38e-456f-8480-9988980ba846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3132bfc6-eb4a-435a-8630-2367331518e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.95']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1842160a-8ebd-4b2f-91e1-8bdba9460388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f04d2e5-1bcb-40d9-834c-afffbf8d8d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc50cc9-a660-4158-8fb2-56c9fb3f8649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616edc5a-49a2-4031-902a-2703602151d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c62f83-3535-4ade-b891-c877affea8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf1469a-a37a-4995-ab43-19646f7cb8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55cc389f-3a0e-491d-886e-529832a8ac32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b4abda-80b5-4782-ab50-d2d91a016561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54182180-50aa-4418-86ce-b75f67a75d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0d713d-2acc-4aab-bc20-6c3f95c6d005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22078ed2-2ed7-414d-a01e-35eb1ee58285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.119']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed37aa0-b354-41b8-ac6e-db1a7c8d76f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4197ee09-7c76-42d7-ba96-ca7e584f6b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a742593-2650-4e28-afbe-c37cf8344408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09c1bc2-47e4-4542-8798-4d8f5cca4449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1423e5d4-0514-4120-8eba-05aa900773e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f33705-ec39-4101-b743-cdc667b1e10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8633de4d-31ab-49dc-a6e0-9b5bd24f6ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d67112a-db67-443e-b83e-671d11efd12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05e97da-39e8-4611-8742-6962bd43405a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77e462e-e34b-4342-b3ba-eae81f25ce05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a35f61-69cd-435e-a3b2-24156dc4867c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55948783-30b2-48b5-9060-3886936b071e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716530db-4f7e-45e6-99f7-b2c92af39a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4749ed-494f-4e53-abcf-6e1ec8c541f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7ba768-b6e5-426f-b390-495202b158fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.142']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3ab684-2d7c-4b4e-aad9-5b9092dc929d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.145']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1739d326-1ad5-4561-8687-74c24b5c34ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.147']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14cb3ae-b40e-44ba-be9a-7a1ee47561b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c39cfe-18bf-4c13-8b5c-b5e0cbecd9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0607d3-b6dd-403d-8f34-e8c5464ff82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0cf436b-c7d8-49db-9c2b-b3c6b9e58237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3060a6-57dd-46ea-8571-05f66f681a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a176101f-c23b-40d6-9c07-26b942a8ccdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478b679f-d4a4-4199-9ef9-1a675d1e31fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.160']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d2d854-bb78-454a-8a98-4c05a0db6b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.161']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1825c3a-0b93-4b26-9fb3-d3ed85e7793c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5b7f95-09cc-4d2c-8e67-4506714d8784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.163']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e750816-6c99-4532-804c-67c2f19c5cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65aecaf4-5fde-4596-bd19-fa1c21e514fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779ebc06-5c00-4486-89f5-968ffa7b3988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fa4916-4e20-4dd5-a471-dd9584405d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38df059e-6b90-49b3-8a01-2a8a419cadd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4b2f96-0039-4376-9457-07567da51123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1c2182-7dce-4492-aae8-e79d3be326c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c93c6c8-b324-430a-b137-c5a7f3b0b6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.176']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1b1e4f-0fb0-4962-9742-1eae823ecbf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1a82da-2667-4418-b338-6b8549f99ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--524beae3-43b1-4f78-bb44-f91dbadfe309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c62dbab-ca24-4f90-bd19-7dc2a55dd0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.183']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c323bb6f-bbab-4406-8856-fd9cc49b68f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ebd4d6-680c-4a47-a1b3-43d6da31f9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec134c1-5eda-4adf-93a5-ea22ce291a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.186']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fafaf4a7-9745-47cb-b5c8-1107f6f0f008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e51efde-ef3f-48e7-81f1-e6a21cf07d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21847bb6-e413-4356-91c2-05b60f83c309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03506292-3ba5-43ee-8da3-ac6a21fa7d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5369e5-b2e1-49e1-92d5-3bccd808f4ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e391bb82-35cc-4d77-97c4-85947e27ea36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4bbdc2-ceec-46d1-a0f8-c808f2fc9c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b412a3c-d679-4479-afcd-01ef0c049136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38639a8d-066e-470a-ab99-7862845e17de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756b4b81-1e57-4346-ad42-56cfd51b9a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9feab61-e501-4cbf-9f91-53a72d419cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae306cc2-ee20-4b7f-8f70-56cc26fab0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc91d93-daa1-4223-b515-48f9c163a0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6331cb-f4b1-4692-ba40-c2ce5b7d65db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5d751e-3e86-4caa-87ef-e315b444ae82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b8ba70-fe51-4841-a4e5-10fc8005ab2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84c0bd4-44f5-4a38-998c-bbd57b8fa686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0a20db-6bdc-428f-a2fb-7daedc48845c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.216']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed42a9d9-b7af-46af-9f5e-4181bff096a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24069fc8-c9c1-4e9c-a0fa-3d530f067616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8e7951-64b2-4cc1-95ab-e4846bf0f9ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984fbded-7207-4054-be78-f732bb7933f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b7964c-2990-400a-bd33-6538e682b4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4deb520-a8cb-4466-9294-bbf48b2ab82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9741aeb-c870-4ca1-af86-ece5e2a5a024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab66ed4-8e85-4ba3-8ad5-af8438fedc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.229']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f42397e-eb5d-4078-b9b0-684ad0c3dd2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eaa0eb5-af43-4c1b-a070-3e5cc8f464e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a1f83a-059d-4c14-b91a-29c5b80bb5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c473c8-6418-4cec-8252-6b0640c0a673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2616bb32-7b0f-483c-bf44-ad67d767ae12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76776b4d-1bec-42c6-9cc9-ef977bc28657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b55a3b-02f2-40db-a02b-a4ec617de978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5514ca0f-c6e7-4057-b570-d78fccae8046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4972b30-9c99-4672-ad73-8aaca3620396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987a0518-3893-4dd9-bab9-5a83033224b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.252']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c271981-2294-4174-b66e-e176b9c72579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107fa7ed-73d4-411d-83f6-7648b3ec30a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eff7479-6ad9-4acf-bc0e-251fe94ede9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28a56fa-07de-4519-815f-d4f50e40627f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a611bd5-a932-4f83-b523-e6faf4402679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f1ddd3-d8c2-46db-b6ed-47a11e99e1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680e38c2-5620-4408-ac7a-77ee52e24c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.35']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0083a6a-7ba0-4a22-9cda-fcdce0e5e0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5957b97c-d461-409f-b3ee-aa8aa5673add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7ebbe4-6dc8-43e6-8e0d-0faeec57cd3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb3174b-e4bc-419b-8e64-e83e1eae9f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0bb7cde-b3d9-448f-ac87-f5ff427af450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e5611d-a0b5-419c-ab1e-3d86121c6b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfb17c5-7d14-4a68-a691-d6d2adfc0485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35655dbb-3e8a-4472-a3a7-acb5c7409af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51e2683-e4d2-45bd-b1ac-e561dd4f8c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38211975-0485-43c1-a157-ba30fdf9ae66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad87fa04-33cb-4cb1-9c3a-5a1ee2f4d5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7835fb6-3192-4b91-8b75-b765b7e0fdb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa28f393-2c43-4c9c-b034-bda02ffe977a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.60']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a90fe3-6c1b-4b74-bc74-d037023e0af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0e94c6-1ea6-48f8-bb0a-7345298866ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfab9aee-f077-4558-8db7-0e18fa199fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a45e7c-c164-4ebf-a60f-0599afc451ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8787b92-aaae-4d4e-8a91-63459c08733e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686e1d91-3243-4772-91db-a1dc7897cbc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c4d63b-ca8e-4c0d-b854-9674fecbfe43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e6b5f4-f800-4425-b432-de1598974cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb192f5-f784-43d5-a386-c3d7ac0e81ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d723daf-8d1a-4e37-a8b5-f185ebbba364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0693aa-7ede-4a6d-8f6f-fb4f5bdd01ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b0a3f4-79dc-4559-9037-daa61188e244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ff3ba2-1641-417b-916c-10271bc1ef37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2efee6c-6c5f-4402-b5fb-04f824490aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a90cb7-bd2e-4e3d-a17e-06575f04cc35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166a68c3-eed5-4fd8-93d6-1653de50d3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.235.217.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eea382d-a092-4873-8d79-4a2e0c066718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.90.176.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776b7286-7484-4205-b031-e679d1eae382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.144.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3feb487-f4f8-47e3-86ba-192705f1d894", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.135.0.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6156d00e-2a75-481f-ab68-391266f81fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4f4f74-a4c8-4a5b-8380-bbb519e65d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a77a1b-bb7b-4fc8-851b-1d4d9ec04ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d989efa7-51da-4465-939a-7af3b7881cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af726017-f19b-476e-81cc-17fc4204a022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.163.223.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e3d42b-5dfe-4229-ab67-13caac7662a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.204.77.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8994404-1c5d-4a43-922a-6aeb0e0b467e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.66.133.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fb8038-2877-49ef-ad77-10df75046a69", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.106.159.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7f8ef5-fd39-49a2-a440-af4931a8cd76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.40.54.63']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9f4ec2-dba2-4151-b05f-371b6ff2631d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.40.54.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76844d53-a90e-4e08-b559-e1a668051223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.157.122.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473785df-cae5-49b0-93a3-093a34d09e4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.223.31.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1df77a-b684-48c1-9cd8-4e9439e55a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.148.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c71648-bbba-4ca3-b34f-68acc8bde541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.162.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2b235c-9f7e-47a5-9b86-6df8155cf258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.200.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60665d2-54c1-49cf-830a-5c62e1d7c84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535fecf1-9da4-4ea9-833d-acc5baf111be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.143']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6dd4289-f0d5-4155-8034-8366cccf92c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.147']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94375ee5-fa37-4eff-bf0b-82374d6e07da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd8591c-497f-454a-85ad-f29cc9a38f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7bf645-0d8e-4475-87c2-dfe7e0f0da9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54167ad-6879-44a0-a6c2-2166373c5647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2ef76e-a0d0-4c92-af0a-2f4e35a34bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23cc32af-f14f-4b46-98f2-edc05377299b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef243a6-b8c2-436b-8b5e-517e7117add1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.40.242.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836f0b25-461a-448d-92aa-f988da73826e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49aea05e-8423-44a8-9939-aca7d39492b3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.95.27.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bdfec5-9753-4f7f-bc2c-3d7817627bbd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.95.66.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c696da87-c49e-42f6-b003-d5a1d15d4326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.145.196.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a0e5e5-7a77-4299-9b0d-08ab4a3c3d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2132dd7c-3c82-434d-a9fe-1deea021f815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b118a9e6-b026-419d-a30d-15b193709d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643ed2d8-302f-4db8-ae46-385cd5f23ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f2fbff-e7f8-41de-a906-e3d7135c48eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0173bd76-1415-4344-a312-2e542f4a62f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.235']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281a96a2-4411-4ab9-83c9-0b88ed779c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c850f9-ba70-4f2e-a013-f8b32f11714c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcfa1ab6-ee64-46a7-ac32-692343837ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.115.152.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfe1b6b-c2be-4171-b037-2ca829cb1744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.136.188.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7a9e24-41a5-4759-8a19-9e20ecaac3d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.136.23.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1963c734-b340-4e44-9bd0-867323afd1c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637c9a98-2fdf-4bf8-a88b-f26596e07fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.214']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e007374-2642-485e-bcfb-9a56e3a07432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406b720b-24dc-4dc1-b3df-c62f75b9565e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6cbce69-c53c-428e-9c75-c54ec2a0b8c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba3be4f-8f79-4c7f-a062-0a50d44d0551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.156']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401727d9-7eae-4945-ac7d-9b4d5f3e8541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.214']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d25eabd-7b06-4f50-a507-709d1e6eb287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e642e1-df7a-45c4-84dc-f2c7c4df131c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16414fe4-a333-47e3-9a39-eabecceff7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ccefef4-ffdb-4697-85c2-ccf0f1886da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70b9680-b350-480b-b747-7343f0d8c2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d7e0fb-32c4-4374-b19a-39a19e0fcfa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc6a3f9-0b65-4256-8c41-4d325d855df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab4ef68-0664-4d0a-ae05-c33a085ac838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8bcb50-7e55-4e04-a886-ba298a1dc0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d164c5-380a-4f0f-b596-998a6afd9270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2300f8f6-db28-4088-b468-87b0885a6f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52fdb53-51e1-44dd-9053-9f10d3919f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463a3133-279b-462d-bfcc-0f42d41e1aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f6946e-99e0-4f6f-bd25-2303bf0de510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54e1916-1164-4745-acf0-3857a08c44d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5e3f9b-40aa-464f-89fe-d906b2152693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5418bd7d-a34d-4e9b-88c9-a8c2eba80ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9b6476-e44c-402a-a08c-3ba2c9bc5534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98b31cc-10c2-41c2-830e-e94b3d9c8886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e94ac77-8cf5-4948-a238-f552f518eeb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa7c61b-bcd9-4dff-b832-2e33f4464005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa924dcb-b314-48a8-a1d5-3994a052f83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cab2c2c-0107-44ce-92f1-a4c0d442137f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4677e0-9d98-4f10-97f0-01c60cf3284f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a3de2a-83be-43d6-9fd4-fed4b2131bf7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.172.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463922ec-86ca-461d-9d6b-1b7c50cbe652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62a7ac7-70b4-4bc7-a0ce-23702ee3a55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.163']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd0914d-ca2a-46fb-823a-a593982cba0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6374058-abc8-405b-b5b0-64cad3cb9a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ff9198-f5ee-479e-af6c-404f08939101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9defd471-10b4-44aa-9045-9af65c9d8f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4147e47e-460e-4dc1-bb1a-89d1bee50c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5b64a9-d177-4e0c-9494-757c11a3c5fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fa327c-a630-452a-ad66-95b7be70d7f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5164c732-9af5-499b-9655-c3b00dc03685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50f2092-b270-4b0b-9530-20741c22e27b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927ad480-6c6a-49d4-9304-f30c7bc63a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a68be0-bb4f-4002-baf8-560bc04c3be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c137bd7f-5a1f-41ed-89df-8dea468c8326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9126a14f-4bef-4510-9a6e-386dbe55bcc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58661110-4cb2-4488-8e5c-55aef9990bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f318403-4ca0-4320-883b-cf3c96fa3b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f173fe74-d134-4677-8473-2c0482be1aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8939307-320d-4f0f-b4ba-ae81b1d39f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8240e14a-c846-4eee-bf86-09e12663062b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906c1052-fa49-42a7-8936-f8cfe3b3ff0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6895ceee-ecf6-4f60-9817-1c0dad3ff272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebad54f-618b-4b4d-a202-605bf0bb4698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42dd5f0f-eff0-4545-9077-f0329132d201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05521a0-1a1d-4a33-9064-885dc460c83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4536f1-e3fd-439f-be87-f2b1abdae500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e5fc4d-cd14-430a-89f7-2edfb94eb8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53ffa5d-ddd3-4efd-acf9-9d60833912bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f919accb-995a-4d78-aae3-aec679c4c493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca91b1af-a2bc-4c41-bb5d-0b3ffbd4388a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1878b07e-3374-491f-97a7-4ef0d4da469d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112573cc-7dfd-4f5a-9eba-243e2f984269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ed7a86-3c4c-4df7-8d93-3833d1f67d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540ce801-9dae-48f6-9e81-475ec4cedad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69d3f3f-5eb2-4d76-8436-f87110c927fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec442b3-4992-452c-ac8e-3b645daa7f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8200ae36-ffac-46b2-8e75-f06ab6139646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172e718a-0db5-45f5-810e-605744f8d21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c938fcd-54dd-4655-9c02-5ac3ddecd2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7689654c-eab3-45c4-9a3c-460f29dbaa43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4eab85-9af6-42da-8411-25eb164a9dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74820379-62b5-4f49-8d90-2cf63b9d1165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.4']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd58c0d-832e-4734-832f-24b5a8c3ec82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa24be43-c6ae-4c57-8c45-6147e2d10606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0079802b-bddb-41d1-8113-140324d38562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--050fa492-26fd-4713-b564-7fc3f4da810c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcc640b-8c87-4b83-b6d6-49b0afe37d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8901c51f-4302-4f52-964f-aa42870e1bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52062235-6982-41c3-82bf-8fa4d238261f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.141.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c365dc5-b737-4fb5-9ad9-81e0f54ad6e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.212.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4613ba-f22b-40d3-a6cf-2e779fa58f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.148.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fbfcc2-e6ad-4d21-80f9-a248f71ca189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86410a1b-4059-4f3c-b897-0738ddefa9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.229.153']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b03f189-556d-41d1-8d8a-c02b8b6729f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79b0e2e-5cfc-4a8a-b770-b9e9ff18f533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.81.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17d64b9-5682-4367-ae12-400f8b2471ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.28.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade68a99-320d-4b09-bdc1-73308fa764c0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.3.126.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c60db3b-4f87-4100-8eea-30325f7f1c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.52.168.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93879b60-71fd-4ea4-b600-20bc7b6061ef", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.75.82.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350e1b09-aa6e-4b2c-8e42-6c3793f81657", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.75.82.158']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa67805-8e47-4943-b4b6-ad4a8f92f3a6", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.75.82.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ae9f58-cba5-4d00-a717-88427aff8371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35df841f-90f3-4585-a92d-acc8394472db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.116.76.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72aadad3-e6e6-40dc-8371-c0d2be1aa082", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672cb12d-f5ce-4037-9f88-1b8ea8f72db7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.119.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebd1985-9a23-43d3-a88a-1eab75ff94a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b3580c-6449-410a-bf91-f4086ac9e219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1651c3f-0d2c-4a0d-b4d3-36926473b559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.29.72.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5732f9d6-b8ab-4a41-9adc-7c38ce849d16", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.58.4.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0feae1-5dd3-47c8-b1c6-f3b2914fb1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.196.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0e67a3-129d-48de-9228-b60f90095cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5516d9da-05cf-49f9-84fc-e699c1d929b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.161']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbce99e-7e17-48ce-8562-fef6d09371c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9327767f-cab9-4190-a54e-6b8e11173b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175ef6ce-334b-48ca-ab13-079674bab1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f708d9d4-ab20-4d85-93a3-f20c48ddd2c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b40dd1-e9b5-4fca-b7b7-474a7cf87746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb6fe33-5ad5-41a9-b08c-19af52f9c6b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3be525-c6a9-4465-945d-b1be9d0e26c4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.88.65.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff354167-ddaa-46fc-bd9a-7fbcc6492074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.92.23.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d82ba2-042b-44e7-b338-d6f763649a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.13.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5190c959-7c00-431c-9b87-13b6b5aa3c5d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.94.142.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ee64b0-0358-4053-b072-5bd9bf25baf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.224.16.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bebcd3-9ca2-48a0-b4b6-40921aae7108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc948bb8-8b3a-46f9-95fd-3693762d03a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38e53f6-4af6-49b7-bd59-7c056be38473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d814291b-9e0d-43f7-aceb-05a066ad6859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5239c146-b79d-4bd6-9f64-ac47d8913c75", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.233.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8eb05e1-21e3-4b1f-89c5-5d3ad538acb2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.236.31.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ffb069-3bbc-4d88-9996-0de5720a17e8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.238.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b777320-d0a3-44c4-89fe-9752e456aaf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.67.31.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f766ea-2f86-4899-a9b4-3e0110c5ee9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.45.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5108fe6-a5fd-4fe5-94ed-1217593bfa7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.185.148.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137d1af2-c3cb-4d3b-b8bf-0f0a41984d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.185.164.169']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9f2fa5-4984-4832-b2a7-f02fc9e70fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.20.144.241']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f781772-3a2d-4546-8748-5f60fce4ed29", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.22.193.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546e9e4b-c232-4d1c-a940-34886c9f67e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.180.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b6ad88-77f1-4968-9175-1f321e6951be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.212.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cf4b8f-e79c-45b2-aeff-3e8f991709e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944457ab-5492-4ea8-81f6-88e6312ea65f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.140.167.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cf2448-7459-46c7-a276-e0c59b8c0de0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.140.171.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64c2486-5c03-4d90-9e0f-b2d5dce8a887", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.241.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e57c16-14b1-4d62-a6ec-4bd50c2403c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.181.44.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639e7cdd-d5ee-4f4f-92dc-48374bcb1d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.86.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4159e8-db46-4f3a-8405-71c78de53dc0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.23.17.4']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7baff99f-0c82-46bb-836c-ee53dde6a9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abdb692a-73ed-4614-ba47-a7fef99f6091", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.45.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394b480a-e6b3-4810-8f4b-e0ec46d0d0e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.51.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0261d53-6749-47dc-92f3-0568e9a5a0ff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.123.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c72bce9-7c9c-4e24-8208-bc6d7bd9b6bb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.29.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fab996c-bdcb-457a-a8d6-8a0033cc6600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.115.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289cf685-871e-44d9-ac20-edda3633897a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.94.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995ef135-cd3f-43f1-9902-6c384fa9fb85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.95.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965acbee-929f-455e-aba6-2d0521784f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.206.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4b96f6-1592-4404-9bca-3e3bcdf93ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.163.9.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329347ac-b003-40ab-8a2e-0cdcebd95325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6473b416-6468-4955-ae92-8bc694d9a355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.5.0.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f223ed1c-fdc8-40c4-9931-3c8b7b8608ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.5.0.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b94b2cc-79a2-4bb1-b59f-6a033d7b4e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.66.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212656ff-4bf1-48df-9bd4-7f296d41ab69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.66.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56967b4c-cda7-454f-9c64-7e0e5e8d1eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add9e0ed-cc0f-465d-a804-fb17463e80ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d7431c-cc29-46e7-affb-1667d6f05eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5167dd1-33b0-4715-a4aa-32b80e8a6403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2a99e4-6b4d-42ab-891a-442b26347123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd00a194-78f7-412a-9bf1-7800c856b9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2dc297d-6818-438c-8ada-d744b3a60436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.20.109.62']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80c2a60-f7e1-4015-ac39-36390fd11c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.52.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d99b3b-9f9d-4d9b-b965-9a1f20451957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.145.35']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac292469-2fad-49b6-bc53-4484d0716db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.190.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f2a050-5924-4039-bffc-938a73ecfeef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.236.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387c6fd8-e55f-4880-98fe-fb59b5c5031b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.66.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92a8e04-7196-4aa5-9776-c11c47e7934a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.19.175.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbab1bd6-b80c-4d2b-ba94-1cce28f26692", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.19.245.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a98bf4-6149-40af-aa94-cfc0e9621752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.210.245.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0db8e0-d2f3-47fa-9f53-804f01e63e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bea3eeb-f6e5-4038-bdd6-a9abd6424d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3ec85e-2301-4d04-b8f3-57d10ae7c16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.101']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac3d79b-1e1e-4990-9528-f6d4fb3ce6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd7cf01-0f54-46e4-84e7-b94d5a1203e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91448805-2cf3-4c41-b2a1-d911e8580bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49b0b80-94cb-453a-b709-6266ed6c59cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.108']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55f3167-bd2b-4805-ac24-db62dcef3535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a902c79b-55d0-482f-82e7-b2ec199a8c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0ddb9c-baf4-4de9-bbd7-a4b3164fa3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3459768-cfd7-4e7c-9da9-6ff32358000f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e1b41e-166f-479a-befd-67af60c3a65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4efd8be-210a-49da-bb6f-8d023eb428af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e423d2f-4342-44eb-b952-57ee937576c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89c6b40-530e-4e44-a255-f76078378f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049bbd41-4367-438f-ad1e-d45fb565bafb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6ab603-bd45-4249-bf98-1d6e039cff3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67565ee0-1a91-4c96-8688-012c59dff085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab27782-fd65-4621-b1c3-1fef799795ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10313e0c-7d31-468f-8f2b-c3197859ca13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.143']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbfe115-4d56-4684-804b-79522e450863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.145']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b31bd63-7e57-4386-a728-3d5ccc6c589d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.147']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d6e59e-f95c-4869-90e1-7a7128dfeb91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520cb98f-7c73-4551-a6cc-1db3c6ad4166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45c71ee-2c85-4301-88f9-f2a858cda92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48acb021-0558-4fa6-aeae-0784f86c980d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ee8583-bf4d-4894-a298-3a0a16188135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f68c05-fd73-4bba-bde1-251e1282b793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e425e276-3cd3-4237-9c88-df56b7dd40a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.168']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb9ef06-a46a-47fe-b6c7-4ca07496b0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032ba101-8a21-420f-982b-7898baccf61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.174']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce088c2-bbd3-4bae-8de2-4b43eef12416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.176']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a90172-a6a7-4bac-9bdd-d6a1d54cccad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c70c29c-e25b-4caa-9bfd-697cf0adc813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60cf025c-a986-4379-bd72-48214c20819b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.180']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2e4ef7-e2be-4fee-93f2-9544695cf306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7e248c-3dbb-4d91-98cc-873763b82536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.186']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2458bc-e085-4735-b148-2ad60f4244b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d922335-49af-426e-a62a-d1b15f2bfbb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8844204-62dd-490a-ab11-72f24985a191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5701d379-d920-4bb0-9103-156c867a9082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c356df1-50fc-42d8-921e-63c4fa84987b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05251cbf-8740-4b36-b45e-4dcfd6c713e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250c44a5-4e09-449d-b031-8fc819b98e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.200']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e04d737-037c-4f98-916b-444e8680f5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1faa3661-5372-489f-beea-b6ef91023213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d507b1-fc43-40cd-b568-d3e0b4eadf14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc53b187-0095-41b0-b98e-2a926b44117a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470ad83a-a409-4da3-8abd-e584f8395d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cad1779-62d4-41ac-aea1-6a90059824f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493a49cd-72bf-442b-918a-ee8d6d167676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8b7a36-a2d5-43ee-b271-f18d2dd70b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.222']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499ec082-4836-43b9-a53d-c4aac70d0bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52dec87f-073a-44ff-892e-f1563633e7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52844bb4-c1db-4026-8fed-768f5966a8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d3e8a1-6907-4539-a7ee-34881cafe756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91422cea-bf05-4311-9baa-d90e1b3b6385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.229']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71930ec8-17a3-4ec4-8863-ad256d81d978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0a9539-26d0-49fe-bbc8-d46403ff1f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5c4a81-3e4c-435d-961d-11a467971020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6283756a-acfa-487c-b7d3-6eddabedf19d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cf9df6-1b58-46f1-8097-c7f0c1c66163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32ac144-1c92-4bed-aa7f-6f3a84c7ea40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d41c44-aa46-4c3a-97ff-dae73185272a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e828013f-ab42-44ae-8974-dbbf00ec366b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.241']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60bd74dc-8576-4aa0-a217-d5cb5ff7bf9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78beff75-7096-40d1-8ab2-60469f1e7c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89b4f74-eebe-4fc7-8225-270f72c0d5c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614a1f2f-173b-441c-8186-398ba9c5ca27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85618edb-540f-4cda-a69b-9185fc963c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eff7535-7fd1-412a-916d-213f25a7f727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce8a4c4-16dd-40b6-bd25-b4901a8bd2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfd5d9b-7254-4ddf-9b2e-59c2993be66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.31']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96557098-cb06-4a25-90ba-0d921322efd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca51db4f-0158-420c-9cbe-560e5040da78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad6267b-7c1c-4eff-acff-fa63013ee103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d041fe1c-e58e-4539-8cf1-f8f4c82328f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1cc65f-586d-4b2c-82c4-cb3de5db3fd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67907515-f50d-49cf-b8ca-b9ac75741932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a67de5-90bf-4fa2-9a0a-d00ce18a4a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753a1834-798d-4785-b1d8-c5f161c8c42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0355dcf-a55a-481a-b7b5-18cb2e7927ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088bec09-bd9e-461b-904d-dbd5126acf30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ab7c2e-2da7-43ef-8b9e-ab9afbdbaf63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb10fd76-0068-4846-a29f-f9168901d6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c6b0aa-b88f-455e-95be-5ddd12b3948a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d523c1c3-03ad-436c-ab1f-5504b290d2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.62']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a870699-bf5f-49c6-93c1-29dc20b1ff14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.63']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7a67b0-a812-45d7-947a-b1e8a5b4effa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6c90c7-703f-4174-b41f-5ba9f292f459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2b401f-d5d1-4290-b190-9b88da9ad08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93621f50-ac4c-4778-87bb-840462540114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd5e4ea-8bbd-4b4d-b868-be4a0f2a543e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea7efc90-9ae8-4335-b739-f305211f87c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e4c999-c179-4d46-9d85-963c320d2d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.80']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248e7a83-ff27-47c4-bcad-a3c7ad59e6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1a1803-0bca-40c8-b413-307e69ff15f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ff8ef0-cc33-4740-99e8-345b7c46d370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce86cf4b-b0d2-430b-bdff-c1b67315604b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9b531b-daea-4761-80dd-818a2ed676d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.90']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc5afd5-db4d-4f32-b8bc-dd8e5f18da19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb8ffca-259c-41fb-b631-d10812331b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e486a30d-cfa9-4f28-9353-11b90d881f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd5c8a3-0235-4e0d-a49a-6a930dd58210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.95']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a216b1a-d519-4848-b057-71302b3cd5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf13b03-8720-4445-acc6-eae458a584aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a83b50e-3b87-458c-bccf-84db264b12f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.103']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6925157-f5d3-42da-86d9-c9e724e33676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc2f47a-3fd4-42ff-abb8-ee3664b909fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a490931a-535f-4409-91ff-c8c6f91697a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd3f345-9af6-4044-bcda-b32251d006c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0822ceb-d32a-4ebe-9670-08a7d223a9ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55bf5001-ceb2-41c7-abae-7668b6fd12fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a24564b-0082-437b-8f89-cf935d5cfc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ba62dc-eeef-4efa-b92d-2804549cb865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1237cb8-dcad-4b39-8f04-f2f61cddc26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5911b860-2d99-4063-80cb-f9ae19ff5e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.13']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5808c9e3-20d2-447e-aad4-a8dfa446142c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e604247d-2489-4674-8c01-8889f8b1f40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406a71a9-6f68-41fd-8fb4-ab0d5aeefb56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3a62c9-25ba-479d-a641-e8e92e7dea06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff2c21e-5e59-4186-b7ef-f2241868d194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4ac81a-182a-4e31-9e75-d2e2d9110e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bdca77-1ae0-40d7-8c40-78308416ecda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aeeebfd-0680-4985-8222-1e2ab7ebdadf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d85b392-0847-4cbb-9541-adc6c5f45f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46de64d0-7e95-4138-9a21-332c07419a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.142']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1616963-8f31-4296-8de2-25cd7d987501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1ef19f-a161-4295-ab39-86ee0249ab5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.152']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652680b7-ccd6-46fb-9a5a-fd0ac88b7aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.153']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76557651-3cae-41a5-90b1-3b7eae1d4545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.156']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe578c7-bbf2-4867-8e93-1460458087ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6537f7c-53c8-42aa-8fe7-e48832784c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.158']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2641a392-661d-43eb-bf9b-335645b94c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467dbe2c-a74f-4e85-89aa-740956ec61f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca0bf1b-1ffd-4e27-8d83-fd0214fd07a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5b5281-9dcf-4982-8c72-a95954a04735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9657909-a8db-4c5f-95fe-c6cd20032465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca1b54a-beee-4661-9e97-ba8412076d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0f49c0-9319-4402-891e-e077a3de7da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.186']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f0de85-4aca-4c94-afdd-6f143215e27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3f045e-fc08-4090-943f-09447499ca3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd5c904-919e-4742-ae91-5cc905d11d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b4a9cc-be62-4b0d-a3cc-0be0d33dcd3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af78a690-047e-4612-9c2e-3cc2feaabaeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94836c50-de3c-416e-bd60-311ab42a019d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e0c3f1-1607-4d76-b129-60c709e37f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a735ec8-631e-4ff2-a875-2d9ea41fc9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11840748-b255-4bb1-8a2e-611b7ab73130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010dd9ec-8557-46f8-879a-d108eb1c4f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa4a4fc-f8e8-4bd1-b358-51250f7cde91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635932ce-388a-47cf-8e9d-d095247297f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291b6e1a-0a2d-4fb9-91c8-9225c97b5549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.216']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7645d2-0098-425f-92f8-262628bc4d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965451c0-52a8-45a2-ae33-29ce694bdacd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f5112c-ee83-4151-9090-13743da1ab3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2197b8-60ca-4f24-adb1-864381d627fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7deb05c7-e41f-400e-ae21-930a4cd522bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759a16ac-f84c-4db5-995c-ec937149df93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561fe128-875d-43ed-ba80-d8078d628718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc072ad-04a8-41ea-86c5-03db2e7d8b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53a40ff-5962-44ba-91b3-234312880e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4361ebfd-2f38-43ac-8bbe-83b0ee3ef2f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eadea2f6-dabb-451e-8e0c-58c4c8f9cc7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b08249-eb9b-422f-9d7d-6e164ed17049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c655fa-6a18-416e-9f7f-d05efcffdbdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e135d4-0fa4-4717-9119-388c0fb202e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a3a93d-5760-4f15-9df5-ffdaa03bd4ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2344306-d33a-4451-8c5c-a8ec2cb0368c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8da786f-2ebf-4ac1-a8f0-a93f33c86ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9c0054-03c8-48ef-be3d-b32dbe583f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4dbbfdb-723c-46de-93cb-567d04a603b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49654007-bbea-4d82-b4bb-b3a5a3e67f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a476cf66-93b8-4fe1-b3cc-78415a90f5e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3633e4-1018-45ce-98e0-c370586c27c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321c483d-f2aa-4f9d-bfba-ddf4834b1910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6688ff40-48e7-4a9a-9685-7f99a1585382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244d990c-7305-44da-90bc-d008436e2466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4294da88-a50c-45c9-a0f3-8621caffdf47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d64be5-6531-488c-b873-f2289de8b1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057bcfaa-3360-441b-80c5-8c936a3ebe98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3d0b75-d7c5-4d16-b058-9c33c1f945fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cdd6073-ee3f-4c96-a883-e08091401996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd54e3da-4a70-4b57-aac8-2e943a713758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56ad6f2-ebbf-41e3-91b9-25e21adc1cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce669a29-45ec-4355-9943-8524910eac1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.80']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276290ee-7b5e-4bfc-82a5-ecf369ceba0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.81']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413370bb-b758-45f6-8cc0-33bd7f119f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16866043-18d3-420b-91c2-eb753402d387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a034f3fe-7310-4191-adbd-c6b43220d413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081e939f-6d87-4d83-8973-cb7d811a0c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce28c6e8-4437-4593-918e-ea85b51b43bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.95']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f538a6-4a40-4770-b5d0-d1cea406c331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd7e7c8-dec1-4bec-a33e-16f2d4cbcd7d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.103.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5659e1-7f17-48ef-b11c-2daf5a7b7155", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.130.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d628535d-161e-4b96-88b2-2246f40b19b5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.130.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586264ea-e24b-49db-b4a5-543dea6502ca", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.181.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e79bfb9-cf43-4eef-b439-a6f628a7ef7c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.215.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30590c1-c74e-4f4e-9c81-21eb6d105bb5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.233.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5adea57-7a0b-4da7-a24a-92c808d9215a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.235.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6289a95-1117-4714-9e1a-5abe41ab892e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.239.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f1b076-6b83-4c0a-b7b5-ad77d7c21381", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.120.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e519fb87-0f4f-4922-a31d-ec7f4d8fcefa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.223.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f91830f-8170-455c-a694-9c0227484884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.172.73.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f644ebf5-5474-4be6-a4ff-21ceeb935559", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.41.112.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c80af8d-5fc1-4ddf-9bf5-d6809b1b91ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb24c05-e738-497f-b129-c04ad15ba7f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e05d33e-eb4e-4fd8-9706-3fba5ad8663d", "name": "Malicious Host", "description": "Web exploits: apache-solr-admin. CVEs: CVE-2019-0193. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.241.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0193", "external_id": "CVE-2019-0193"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7699ebb7-3caa-47d5-85cc-b85597eeca02", "relationship_type": "indicates", "source_ref": "indicator--5e05d33e-eb4e-4fd8-9706-3fba5ad8663d", "target_ref": "attack-pattern--f2335446-3f27-4b9e-aa8b-89a8cfaf2ec9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce7f7338-b23f-4891-b3ec-4db6b0c21e57", "relationship_type": "indicates", "source_ref": "indicator--5e05d33e-eb4e-4fd8-9706-3fba5ad8663d", "target_ref": "vulnerability--ff159f14-b1a1-4359-822f-45941adec36e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3be2492-8e04-4d84-9d1a-1d05028eccdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.251.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e41b70d-6a41-495c-97cf-0bfab2ea5827", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.101.222.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93353ca1-d734-4e53-b7d0-e6db7cf8194c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.101.75.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6707c4ab-54bf-4017-a256-087f16817f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14defba-85ca-47c0-b5ac-7f719fe55be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371e5102-1dc6-4eed-9008-037d5e654626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8366d17-393d-4945-8533-0f31c519e82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4790f7df-f2ac-40e2-8818-2cab0a673efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53c19bc-26f3-4f67-a455-060475e9c63a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0730bf82-be75-4b2c-8bd8-d6d742633421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ead8e6f-f3d9-4afa-9528-df087e115f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5bd4c16-2b23-41d9-930d-b18fa2043d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e41356-8cc2-4fe2-9f22-aa943d008bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc83848b-cc54-4aac-bb76-e0972e110779", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1381e11-c6a5-4e94-a50c-e2a734e280a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8fa1ed6-89ac-4670-b6cf-b4bf04b9095f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.152']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91dbc875-9aa9-4e34-8520-f1c1bca3b737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f606f18b-dadc-4e94-83e4-f2295a2a2053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1437e7-b54c-4d6a-ac76-fbcb51548c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1785ce-5425-48e0-bbcd-b9a91354453e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.222']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e67736-5f44-4364-8c13-428210c44da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62de2804-a465-45fa-8233-cc2a10eeae9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.136.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97df8f11-fdc9-45a3-97da-6edb6513b647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.150.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6c0a68-a68d-4bdb-89fc-500680341adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad8d8c6-d39e-4ffd-b978-19fac1925218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66488b76-a70b-47a5-9546-b092e88848e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.163']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9086e98c-6266-47ea-b18e-4778a975f4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ad77ca-f83f-4e0f-957d-c33b131613cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095a3e5c-572a-40cb-9a7b-66cb71893220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9f53f6-d949-4525-a10b-bec3dbb020f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61dbcda-0ff6-4f3a-beba-1b62826b66d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5e2ff6-2909-43a9-8146-a6b9af3dfd00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d067e99c-a7ab-4144-90a5-f9e6f4e881a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282e0252-77e1-44d3-ab0b-9fe0a3fc9e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd8d9d9-9a84-4ffc-aa85-cb036a402bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3979f051-6089-4089-a10a-b3d742a3830d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90b4228-9fa2-422f-a219-a9a2ee0f04f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994ab290-4df8-4ac0-9baf-9bb5884be817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863e981b-69cb-4d36-8815-0e10a2e16b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f2a170-7f13-42d3-b85e-2f653cfb9bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f093d8-70cb-482a-82fd-38448ebd3ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c094d5-58c5-4d1b-b998-6df622880552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4c9a3b-6346-438a-b03d-b77fff84df7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa86f5a-d85c-416f-acfe-9a729f5dd79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54363877-8c57-472c-8e99-dff8ee1b0a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9b3815-8863-4ba7-9229-8672067a19c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f104e5-3171-4201-8eb6-191c7cc9afe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e46f99-b3ef-4af3-b289-a32dd8eb89b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f29566d-25a4-45f0-853f-b398bd791417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.174']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0bc45e7-6957-4be6-98cc-e2047d10ed4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435d90c0-9d12-4a3a-b27b-e81b2dc5a700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fc46d4-0dc2-473d-8c77-3094a3c15b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc01ac1-1396-4592-b9eb-09fd1e57c498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96bd2fe-9d9f-4680-9db2-fc736ec3d305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa225caa-cda3-4246-8c27-d07eed58456b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4830cd61-2cce-4261-9124-5a2daa91824f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d71c35a-e45f-4651-954f-559e3a55d289", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.207.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0d1756-86ad-44a4-926e-680077c7e36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d080d624-f71e-4241-9664-91df4c651b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d825cdf5-1a8f-4930-8433-d39f8baa3069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a09cb84-1c77-4f51-aa5c-8a1f80be4f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa46263-1f97-44c2-a7fb-875f0c89a6d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.33.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12bf153e-fae5-4b11-b009-98c7796c4cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfa7fe4-d4b7-4048-980a-7419775b9f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d04940-e71e-4361-8ce6-d560e00ffcd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a766d3c-06bb-486f-b18d-98deb08828cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9988d7d1-538b-4b99-b416-96804a16428e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e658a2a7-c7d4-4201-b1ab-8d106ec80139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37948d56-afa5-4a50-ad89-a345c8e8e262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421191f9-9fb0-48aa-b3b1-82af1f788aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce09c1d-2939-458a-87e7-a9eeff636e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5decb9-443b-4348-87de-3a0cd51ac227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad42a6e-6c57-4a24-8c9d-58b011f59154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5cb73a-3032-4c76-96b1-aa3ecb97d6b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b3769c-46c9-4473-9ede-84a91336e4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e43286d-db6d-4e30-9e90-b9e7d85b6fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88657051-5a43-49c2-9fb2-35c7e31cb1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082fcb0d-4fd0-42cd-b0c1-c95fffe51da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38498206-7125-4992-a1c2-89828e3d2fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd5b459-ade2-4a2f-b388-715e58a5a693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.52.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef1706d-05a2-4517-8d43-3cd626048b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2890c7-e76e-40c0-b58c-4b7c290c828c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.177.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7aaa21d-a4d1-4e28-9ce3-55685f72f4cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.41.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4338d00f-d830-487e-a043-806015e7fe2a", "name": "Malicious Host", "description": "Web exploits: vmware-vcenter-sdk. CVEs: CVE-2021-22005. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.132.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21985", "external_id": "CVE-2021-21985"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22005", "external_id": "CVE-2021-22005"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd190069-4e51-4224-a3fa-7685be46d8a9", "relationship_type": "indicates", "source_ref": "indicator--4338d00f-d830-487e-a043-806015e7fe2a", "target_ref": "attack-pattern--f2335446-3f27-4b9e-aa8b-89a8cfaf2ec9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6bea54d6-4785-4be4-b6b8-ec06cfa0068e", "relationship_type": "indicates", "source_ref": "indicator--4338d00f-d830-487e-a043-806015e7fe2a", "target_ref": "vulnerability--78e0c24a-2cd1-472c-a9cb-5e772efcc568", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--deaf1a7e-f94a-4c59-8abf-7b5ed46124f2", "relationship_type": "indicates", "source_ref": "indicator--4338d00f-d830-487e-a043-806015e7fe2a", "target_ref": "vulnerability--f74fff85-2722-4526-9342-7d2d2b0f8db8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537eccd9-0237-4553-b07e-68b0171c7442", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.134.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b6d116-3adf-4b49-85cf-ea7dc3497e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.147.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba0fb83-2b41-4d7b-9846-9b56fde48326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.21.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f82856-d1ea-4511-aeb6-0a585d202079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.62.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9998f19-d870-4ed9-8192-b120a6354fcc", "name": "Malicious Host", "description": "Web exploits: vmware-vcenter-sdk. CVEs: CVE-2021-22005. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.126.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21985", "external_id": "CVE-2021-21985"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22005", "external_id": "CVE-2021-22005"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b120d43c-d287-4606-b0bd-0374efbc2c85", "relationship_type": "indicates", "source_ref": "indicator--d9998f19-d870-4ed9-8192-b120a6354fcc", "target_ref": "attack-pattern--f2335446-3f27-4b9e-aa8b-89a8cfaf2ec9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b20b7a2-ea7b-4e54-a74a-03f77c127990", "relationship_type": "indicates", "source_ref": "indicator--d9998f19-d870-4ed9-8192-b120a6354fcc", "target_ref": "vulnerability--78e0c24a-2cd1-472c-a9cb-5e772efcc568", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--938c4330-ce46-4282-8463-a86f3209ecce", "relationship_type": "indicates", "source_ref": "indicator--d9998f19-d870-4ed9-8192-b120a6354fcc", "target_ref": "vulnerability--f74fff85-2722-4526-9342-7d2d2b0f8db8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13efcbf-53ba-47d0-a2e9-27b723018fdb", "name": "Malicious Host", "description": "Web exploits: vmware-vcenter-sdk. CVEs: CVE-2021-22005. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.66.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21985", "external_id": "CVE-2021-21985"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-22005", "external_id": "CVE-2021-22005"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e959f4eb-5294-4919-9b8c-842aa4b5fb31", "relationship_type": "indicates", "source_ref": "indicator--f13efcbf-53ba-47d0-a2e9-27b723018fdb", "target_ref": "attack-pattern--f2335446-3f27-4b9e-aa8b-89a8cfaf2ec9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c42ba4f9-417e-4b95-9556-5f5f242fe272", "relationship_type": "indicates", "source_ref": "indicator--f13efcbf-53ba-47d0-a2e9-27b723018fdb", "target_ref": "vulnerability--78e0c24a-2cd1-472c-a9cb-5e772efcc568", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--583597a7-7041-4332-b3ec-35d42e1a89fb", "relationship_type": "indicates", "source_ref": "indicator--f13efcbf-53ba-47d0-a2e9-27b723018fdb", "target_ref": "vulnerability--f74fff85-2722-4526-9342-7d2d2b0f8db8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0100c9-76dd-4809-8ef5-ed74b09641db", "name": "Malicious Host", "description": "Observed: SSH, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.172.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e247729d-f7b0-40f5-a65a-d82d1e1070b8", "name": "Malicious Host", "description": "Web exploits: apache-solr-admin. CVEs: CVE-2019-0193. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.215.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0193", "external_id": "CVE-2019-0193"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8b006b8-76ea-454e-a99f-b2a270290771", "relationship_type": "indicates", "source_ref": "indicator--e247729d-f7b0-40f5-a65a-d82d1e1070b8", "target_ref": "attack-pattern--f2335446-3f27-4b9e-aa8b-89a8cfaf2ec9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d2c8e7e-099c-41c8-bdf7-e23b702991a4", "relationship_type": "indicates", "source_ref": "indicator--e247729d-f7b0-40f5-a65a-d82d1e1070b8", "target_ref": "vulnerability--ff159f14-b1a1-4359-822f-45941adec36e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf3d945-9f3d-4704-92e5-8a0611d3804e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.219.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d80ac9-892c-43d6-b434-92ec697db7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.99.16.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a833e90b-b364-4549-beec-b555ee854058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.144.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ad8dba-908b-4794-b5ab-f7980ace0bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.159.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebfa742-9781-4b77-8437-e8390f62810d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.50.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba50046-b3b7-4b2a-9ce5-589f7e1d5648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.89.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69920431-5c23-427e-83b6-c2a8f56ee398", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.233.204.156']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1afb8e-1d6a-4f1e-b9dc-cdb84e6ef464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.250.36.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00bcc74d-bb55-45fb-8646-ad8b2535cc3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.253.159.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332ca248-6613-46fa-be0c-1ac37b372176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.142.154']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00040895-f4f8-4172-9a4f-7a847f63abca", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.72.95']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002557c4-0eb0-4e1c-8745-3d8203168447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.126.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b87d9c-09cb-42a9-aadf-6c4531c54911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.168.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612dac02-703f-4562-9464-0d1766ad9d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf9556c-a5a4-406d-806c-3fb82a02637c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfcce5d-b4ab-4daf-b0e4-319af195cf5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf15fac-9992-4035-a784-a132d65d9097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77464c5a-da3e-4f43-ab4b-caa6d21334cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe067c2-4785-476a-a893-19a6a90b756e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e10d44-968d-4a7d-a804-39770cf6e0ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9977d9a-7c65-4241-8586-45c1231b1b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405846d8-7a82-4a7b-85b6-3d251b77482c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e5bca8-1e71-4019-8b7b-66aaaf966a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09e30e5-0cc8-4cde-a09e-7f5d4f169b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3b76b3-7aad-48bb-871c-419c18d5af59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f92192-2cad-4829-9bca-f53117a10d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d377d18-77d9-4fb1-8a14-5b9807ea131e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6046d94a-550a-4b22-8b12-6f93931cd4dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae7df93-0320-4c46-970e-f87ad8b8b9c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24cef18-771b-41d3-9733-c56ada47b5d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c5f70a-c273-4a95-9b68-8cc0a8b63506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79b01d3-c63c-4590-8a58-b50d4c2ef1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e56ad9-56bd-4a16-b960-4c31df356290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc69d8a0-82ae-478d-8eb3-74dc33ac4424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d365a7-c351-487f-b21d-72c84d0e696c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ea7204-0362-4f24-87da-abba5302a2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369efe74-f07e-4d0e-a150-7a0efbbda385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8786de1d-dc0d-4ea3-8e9d-df9b3122be9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c19147-8aad-47e1-8256-b2f1d613f080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cacd87-ace3-4537-8576-58194ffff3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c0672d-acf6-408a-8ce1-4dd2008d6b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aef8e33-3860-4401-b810-b1d6b7713508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96eccd6-e38b-4a09-b1da-2b05be7b64f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e88a9a8-c6e7-4909-919f-85fc889dc0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807e6e7f-c87c-43a2-8db3-61831920cfe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f736ef6-4ee9-4e03-9429-ba80dbe19a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f9ac57-ec75-4fb7-b9b9-9b2db2c60505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4e01e5-8a1d-4383-b1b4-a028c9765a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34b8f2f-15f6-4221-8376-37ea6f9393e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11730753-e01b-416e-a925-7d4472a23e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8d8c5d-c596-4b8a-85bc-2fedc8751f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d489de-fbcd-41af-8181-1cbfca44f2f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.62']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a75555c-ed1b-41a9-a004-a2734fa7b46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.63']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ff63f1-af07-4097-a7f9-ba5e96216141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc04d18-add0-4947-bce5-0979e396f847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6c6d32-a006-4897-ae2b-9e2f0e0dc92f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c23202-6c2a-4a77-a13d-2b7ac07864b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e9bf06-95d2-4d95-b159-386e2e62e6e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18293378-8781-46c5-b895-1845b1cdf57f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e415a36e-ab97-414a-b1d2-3ec760957732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38d26c6-05dd-47fe-87f6-61d3bb2960d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1cbe36-98c4-4ca4-95f9-3dfe80666b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.109.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e36065-e4e3-47bd-af9e-56fa7bbcd2c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.0.196.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc5db33-eff9-44a6-9b4d-b0ce486447ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187a1002-70e9-42be-8523-355896283301", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.122.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcf06b1-c564-4b16-b979-fdd86bb093d1", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.181.104.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c808208c-ebd9-4a5a-8c20-d6ec272dd0a7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.235.102.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6506d21b-cfda-4eae-b500-267b49871797", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.90.212.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5021036c-5123-4939-bd7a-0ba5edb6b1bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.0.105.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db250957-a4b9-48d5-b2ab-f6c5cc8dc4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.211.128.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09c3244-7537-4086-ad8c-ff7e9eb36f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.186.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6360724-1942-4f2a-81aa-2a9d35eaf8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.191.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1cc102e-47d9-4b77-b1dd-ec8835c22153", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.98.0']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db0f13c-7e15-4546-983a-7b4f26105c33", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.22.237.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c99610-0d33-4502-80fc-7ab91f39858d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.246.19.33']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb2f3f6-f88b-4654-9fbf-222d3cdef25f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.110.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c89894e-38b5-4158-8ac3-f98b6de748c4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.140.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81cba770-74f9-438e-99f0-1e52a689a5bc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.161.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c9585d-2c3e-4a74-8c94-6ba6c243646d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.180.153']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982e76f2-d577-461d-92a5-89544b327450", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.35.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910b419a-d6c4-410c-b491-b42e235efe47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998a5b49-41e4-4539-9876-9675d36c9881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590420cd-5551-43f2-8cdd-e923f443edbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10e1c76-817b-4834-b5e7-70c61de6d348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a817f309-098a-415e-993f-2698ec5bf545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02739d5-e1df-4ccd-9247-03ab799a4d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dea268a-3957-4bf9-be0e-e0183367bda7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e7dfcf-4624-49a2-98ba-0ed2d3bca939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce25440-67fd-44b6-8f43-aaeae1a4d384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.39.184.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58472408-6599-4605-92a8-8692ba5adb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.154.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d360edc-c851-40ed-9d7f-94f45cf5465f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.104.83.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f86d95a-161b-4fc5-b1fa-12a17b7e76ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.112.139.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e28fe5c-61b7-40b4-9e7e-69e24709f9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.113.150.160']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536d6424-dcc9-4e7d-88a2-ecff7560f2bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.227.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2920378c-55b0-4f56-a68f-aaff83f85297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.228.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc6af7b-e969-422e-a600-d35d4b622998", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.178.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9d7047-6c89-441b-a06c-26d8d7af23ba", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.187.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89560598-9f02-4dab-b8d4-b13e0f614386", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.188.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695709ea-ccb5-4f45-88b4-f855214dd863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.83.85.0']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b558046-566f-4a0e-afc9-5a34ec3ee5bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.101']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb8d311-5224-48a3-a6e6-311b32e53125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ec75d1-a18a-4191-b200-39ebf3e40e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f1b719-09bc-4e7f-80cc-ce7794858bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865bb3a0-8017-48b6-8f9d-378ae1decdd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120c926e-9da8-4187-bb21-2192e7426332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149da6f2-517b-45ad-9715-291553fb8271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e237a14-10de-4f50-bf6b-58fcf845b323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce96fb3d-2aa1-4863-bc99-be2a02f62964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7653a4ed-43e3-4ef1-ba1e-64a8cfe18d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b73682-557e-4d74-b3e7-14cacd42c4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96d40b1-ab71-44b8-9459-c435de62fe53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.170.60']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b09e696-ab06-4a16-97a9-1f3acabbdffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33925b62-bc58-4851-9825-2b555b225bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.13']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba15f870-fcec-447f-8ac1-9c4e6ed4c8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a278c7-0a48-402d-af78-88b78ae49ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc67e06a-e71c-4e6c-9f31-d3d8f0601f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.154']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1463186-1c03-4808-a545-cdc30b0564a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e100d3be-7d85-46a8-a030-4f62ec8ce0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.147']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d30c98-6cbd-4653-ac42-c9cf4777a2e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.216']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5ea8dc-a1a2-4ddb-8d10-9c93615cc035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08f91e1-6681-4db2-9048-92da10a3621c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2627cfa8-9008-47a9-baa8-732e1ccde009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.24.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27149f7f-f311-49d0-9663-78666470ade5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb5c39b-b725-4d95-8356-845891427b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9be3173-7835-46a1-9537-a31082dbc0e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59969ba0-961b-4f85-ba55-34089b5e1bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2800220d-e74c-4735-93da-d8c998c9ca9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f436121b-a98a-46b2-b411-b1530b74ed8b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.212.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba6c0a7-3a98-4f97-87ac-6ac9c9760fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.92.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1443eec-1655-40de-97b6-9f8feae5a14b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ca67f3-511a-4713-bd2c-07ef44d364ab", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae21dc2f-4666-457f-9bfd-690baf318bdb", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e8c4fe-fd50-4138-866a-501336df3a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394f322d-8612-40aa-b4a4-c57bcadf10e7", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874781c4-2832-4ab1-a0c1-f88f2d58a3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.112.208.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002b63e0-c118-4bc0-a36c-6c08aeb743a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.16.44.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e2975b-cd8c-40b8-a8ed-767759f21751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2e29ce-1dea-400f-a739-ab6e10ee2a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c6c761-0c66-4154-b692-a585f03aa3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.191.178.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353f6205-77c2-4af9-bec8-bdf4f5f48483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16df6e65-52ec-4907-b5c3-6d349f3b07cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8766878c-65f6-49f3-9baf-8b85d4caff1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.133.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28aff12-06f0-40d7-8159-98fca8d18f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6aff433-f535-4280-8772-0921c2347231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.145.162']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce53d2cb-4682-45c1-9729-f202e83ee40c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.145.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820d578e-9a25-44bb-a6fc-67a747d6e53c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.221.184.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93cfea96-c383-4cb9-81db-3fde025de5a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e5fb25-4a1a-415e-b3cc-b8d436304400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c4f72d-1ff3-43eb-8a77-d1dd54e5f464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f586e01-4758-4655-850e-1c10cd64d0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d63f46-7f2b-4f42-9c8e-54163ddd112e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1591fa1d-e890-4890-ae0f-9e4fc3b8db2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f989b83-0bca-459d-bd81-9d457764b4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ad6eac-7e0c-4b7f-a749-fbec048a1fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ce8319-f900-4ff5-be43-168377ce0668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9f040d-ecf7-471f-bb8c-2b4992f2c672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2dbe157-5ce8-4eb9-b5a6-3af23d0d6795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed120fcf-a2f6-471c-b5cc-a0a2565fa479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f64d632-6c34-4de9-bb91-574163e6c25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850b723c-9aef-4308-bee0-5415cf57c64b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea8283c-10fd-4527-bfa0-1d58b048dd56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e45850-cb9c-4aec-af94-c236da1cb660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617f37cc-6ef7-44d9-9016-2d9ef69a4cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2752f3-2b3b-40b5-9d89-f79e0a66928c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ed4d12-613f-416f-b3e5-9df6864b09f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b636924c-ef70-4be6-9475-ffe557ebecc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5477b36e-1154-459f-8427-277dc8dc917d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9843495c-08e0-46f5-94f7-55be85b552fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.222.168']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597e1886-7aea-41d8-821f-7ae645eb13ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.222.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f0cfa3-8d67-47e4-89f3-ffb156d4a071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.222.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4f5f43-8db9-45d5-b54f-d42f060b3deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f928e48-22b7-4463-b26f-57d70ec4fa9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe75aa5-1cf3-4610-8607-cc3de3f2f308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1dbdc45-448a-4f38-b596-1c48396db14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e81c04f-45ad-451a-b3f2-bb0b5c767231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fd4c7c-0002-4a9e-a68c-4960d91fd607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532687e0-5088-4580-b165-2fae39b47b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ff141e-e699-4cce-8d8c-49a3f701c72e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039d8c3c-fed0-4695-95fa-96e4d6cefeaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3996741-7e37-4478-9612-352b52942b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034fa212-6282-4157-b402-8a49bc8eb2dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94378b4-d402-4663-a3ae-2fd72f9bc867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0893e571-c09f-4619-ba9e-c44dd59f7307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589e610b-b126-4661-a01b-34cc13246104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b6a359-5648-4c6d-a030-b556051c86d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.145']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3598210-2182-4539-9c4f-79b918dc5261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c340a10f-41d9-4633-aedc-f0f09118a4e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82451e22-d33b-45ea-8ff5-e3bbf79591fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1f82bc-960b-4314-b2eb-7a03d8827520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e557dbc-0e6e-4dfc-bde4-ea448c840b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82af65a5-36e1-498b-8908-35a28a8113ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e12a22f-3439-4c80-a5a3-eee989b163d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b41a4da-3a29-41e6-b484-7ca949b4965b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7c2d05-0917-4a48-b83d-d38a3eb39e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a5512a-f904-4f53-8bf2-b7b75b57a5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6898b6ff-f31c-402a-9bfe-d9f80d32fd63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822da146-91e7-4ad3-b8d7-7072977d29a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9cb399-6ee0-4834-b943-a55d072eaa11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba00df5-5c17-4c87-9d8c-86a1694337e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fabe905-58bc-4d10-a396-a232b7296ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d79d0b8-c50f-4043-af28-b50839a296f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0922fc07-1f12-4735-861c-31a77cc3334d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b4a04a-48a1-451b-a5be-931f4352482f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0bf18f-d812-46cc-b564-f09e5a9e5c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d5c77b-272a-4279-951b-f0f2bda23f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79011fd-5b4c-4c2f-805a-aa84d1c4f4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efeabfd-8508-43af-a01f-659c9613eb02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01a22cd-4561-4ad5-afa4-596ad935ec37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d80a7f-bb66-4d07-b176-3e36be0b0152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2877ad16-3740-4749-a30f-4099700cd248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.16.13']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4fd13e-0aaa-48f8-95a2-fee6f6c141bf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.255.82.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e3314f-b76b-4319-87d0-de5a17542807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.30.4.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad13a88-fdcf-480b-a2ff-806a11896099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.56.164.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ef7636-e719-4015-9c52-8f6b464ad4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.171.241.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e4646e-0041-4b40-823d-dc8fcd91f93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd42b9c-805c-489a-a6f1-555fa2102981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14b1e0e-bcc0-4ad9-a51a-ca149b33edef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.231.20.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e639dc1-4779-4500-b846-3386f38281bc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.233.74.81']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90013099-f657-4976-89db-aea9b3d9f137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01f9960-6eff-48a0-a882-112ba89f724c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c278b623-d75f-4d3e-a12b-cb1fdeb63a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52887164-dce4-423b-8342-030d7e288d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d7e0f9-021e-46f7-ac53-9ab6cff4b98c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed431f92-1ecd-461d-9cc1-720c664f8602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de100078-2487-4714-852d-019d88233556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba39a5cb-d537-4c4c-ba35-2d4c70162e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be09a7f-138e-4202-9dd9-4c956d6ea1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd05f54d-4935-44bf-b7f4-3700ebb4aab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673e01fa-88e1-4939-82be-13f9714e0954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2746f596-749d-42de-b8f0-cacd3f21461e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5833da57-e81c-474c-afd5-c492b922c8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.227.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ae476f-ca68-4cf4-b36f-c547dde0ec99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.238.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26babb1c-7244-46e4-9d29-3ff91f0213f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79114f79-92a1-489f-9327-b8860d1b61df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dec0e4c-3594-4925-b93e-d765b072032c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.249.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88942019-dd8e-4ec6-8b4c-113da8252fef", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.107.23.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d5c626-bffb-49bd-94a8-618a210c69f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cbdf9f-1b02-401d-bdd6-19a46a8fe80e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.183.197.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7ce120-8378-4f23-8482-d0fb7a98e099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.21.51.80']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcbea219-b4f6-49c5-bfd0-a32488bb6f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.68.102.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d805ca8f-4c2f-4504-b389-58ad1bc29a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.11.240.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33990abb-633b-420f-a43a-f703d37e765c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.110.215.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57be2f1-c184-4cea-810f-fbd10c921480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.119.225.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99936e8-c320-4680-a2ce-df0c6ebaff2f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.195.238.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a3d179-c5aa-4c21-8470-43bc435ea4be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.210.17.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997b6357-eeb7-4492-982b-50f85df325ea", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c0b113-7259-4d67-8a71-4aedc4df423f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.44.42.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f52f75-1698-4204-957c-3f686afe5eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.8.63.142']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7fb7d3-8ea9-4b48-8716-f781cf4f4726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.105.206.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e313ce9-6af2-4cb6-8223-0dc39367e8b9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.114.184.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6114d0-d0da-4d43-8649-03455a58b3ec", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.111.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd1881b-b525-482c-b6c0-0806f4ee9d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c92517-e29a-45b5-a95a-216e052ccb88", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.31.232.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a023b71e-99c0-4572-8aa6-72251c1ed9cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94bee7f-1ba4-42bf-9af8-ba762c42eb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.37.14.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd80234-9693-4d04-a873-ca2bf1e5aa3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89284ea2-aeb5-4c54-8955-623a89ed06dc", "name": "Malicious Host", "description": "Web exploits: aws-credentials. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f617037-db44-4155-9b00-28e5c2b65ea6", "relationship_type": "indicates", "source_ref": "indicator--89284ea2-aeb5-4c54-8955-623a89ed06dc", "target_ref": "attack-pattern--2099f92e-22d5-4f56-830c-a0f433029f77", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dec5b6df-77b6-4012-be73-a5996e417eda", "relationship_type": "indicates", "source_ref": "indicator--89284ea2-aeb5-4c54-8955-623a89ed06dc", "target_ref": "vulnerability--c81e14e0-c6e8-4463-9ffb-b98b2c6a5160", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b1791f-0075-45c6-8cfa-6318ebea7ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888a848f-f06c-4427-bf33-49206180bc22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782adeae-d5ee-478a-94f7-308e97b0d0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f884115d-895b-4044-8876-34b1d0179cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b0019d-86be-423c-b9ed-2ad14d9f4ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9617699-923a-4545-b843-dc5578dffcee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949c87da-35d4-446c-b321-a77a4fdb9604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b087e3-b26e-4cd3-8ce5-bd9449be350a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78b7f3c-ae05-440e-becd-d7d2394a2e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc96439-4dfd-498b-b8ff-9e9699b568bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d35f61-7186-4c0e-81d9-a75ea3cf2aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.10.139.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c15fa0-316a-443f-bcce-431faa76fadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.104.174.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96defb85-80f9-420f-a280-054420ba66fe", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.183.215.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce7efdd-1f37-4c4e-92a7-b0812cfe88fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.72.228.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933c6ae3-de52-477b-b750-9ae048faa401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.85.90.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d7e73f-b514-4c73-a840-1d831879ca9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.91.23.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572aacd7-e2dd-4291-a9f8-b8de16d34f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.200.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1be8657-2995-4fae-bb2b-47a45f3f9229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.108.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f4d135-5b82-4613-9fb2-7fd20b4838f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.32.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3ca0da-6835-4862-af40-820c7ba6c01e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.141.132.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9f98f9-3b02-41fe-b432-898cbf74d300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.151.107.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecad2272-ad84-40d1-9a8d-c40e4f6a6e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb84e97d-c210-4db2-aad8-4f90471f96c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b08c1c-01a5-4507-8a2e-7cf4ab2cf887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9780cc33-9e9f-4038-8996-bcf33d390177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.236.22.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0c6b16-0807-4ecf-87f6-3ec4d26986a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.239.180.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b787761e-6ab7-44cc-afa0-84c70bc67bed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.73.234.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9d9e00-bb8a-40dd-bd36-7d80466736ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.78.176.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c2f8ae-593e-42a6-a243-6669f20472cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.84.173.126']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b3732a-0e09-4a95-a6db-b1f3017c1de3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.94.25.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525d0060-1113-43cd-950a-3634d1786b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.1.143.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c199b3-5a48-416e-a60b-0282d96741fc", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.167.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ad2c63-e80e-4e55-8dc9-30b2ee9f33e0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.137.164']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2265306b-3dd2-4302-b1e0-5febf6280c5c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.137.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e0be66-02a6-4a02-80d3-0825dae2db01", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa3cafc-3343-4008-b5c9-aaa0d98d7566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.101.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e3d9d1-8f20-4d8d-b82a-5a3943ef957d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c147a269-98c5-486d-a2fa-be3c0c483afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8d09d9-626c-43aa-818f-74a68648e1f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e37dc4-5d07-47b9-823c-055e4c69fd19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.118.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694ed037-c6f4-43cd-8a25-99b966052194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdec0ccf-247d-4f36-aa6c-5a7154ac0b19", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.110.47.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce711168-3381-4397-99b7-afea79f58eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.121.51.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43f9f39-a50f-4115-88ad-1558cd0e51a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.188.24.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c875eb1-2e5c-4a7b-afcf-d47d4040c8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.190.20.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e9acf6-3918-4fe5-ab68-36b272adf7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d867a2-8cfc-4db7-a63b-75f8bd1a2931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.233.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c081a5a-9629-489f-ad47-1207f6ec3312", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.133.16.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d3d707-b7b9-4b0b-b405-2a044861fbdc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.21.233.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be3fd89-82cd-44a9-9d4e-9669861d70ca", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.83.147']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def9a0df-b67a-4f1e-9be7-ec7da4d18b3c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.83.95']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1970cde-d808-4b37-9766-3dda61aa4ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.225.32.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267659e8-43db-45ab-85b4-9d5cdaa26b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.233.166.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c21e40b-891b-4f5d-9f7b-b77392a16650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.30.39.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2992edff-09a4-490c-b0e2-f8e7ae2ea6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.46.166.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713eb733-aeca-427f-b650-d21e436d46ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.46.255.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3aef3c7-d840-4983-8c2d-43a9935ca1b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.46.39.216']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369cf12a-fbb8-4c1c-a7d6-29e683a658af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.50.21.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91e873e-b413-4501-974e-28f15c2e053b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.66.164.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c3c9a1-2ba4-4f50-a45f-4a7f930936ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.98.76.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d070797-73fa-4954-b988-c0b094e8560f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.105.123.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c063f67c-90cd-4f41-8886-1ecf7e82400d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.113.117.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8f1080-f78e-4b8c-a9eb-066b93e45785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.116.88.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da0fa82-80f3-4e88-b668-b366d7648d7c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.16.91.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b7e685-af9f-4424-bcda-06669bcf4ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.207.179.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecac57a-1104-407a-8462-3981236aca36", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.234.23.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0c372e-4075-44a2-b202-d7561acf12a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.240.200.252']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841f7168-7c92-4d3f-930b-caab3aeb7313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86b1160-2610-4ccb-833b-8980e995cc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5670b6-993a-42a8-91f7-87bd2e035750", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.174.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15cef708-86f6-4082-80eb-9b852eae0ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.32.230.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709887d6-0e18-45c7-ba22-3f88da2fc54c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.46.62.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a1ad80-62d4-495e-818a-26620efdfa68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.183']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d6bcef-b6fd-458f-95c0-8e142a225910", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.92.181.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31be1fb-a7f7-4f2f-9e96-5665deeb5168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.93.78.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0cfc1b-1bd6-4548-a104-d708aa82e9aa", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.134.217.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4776fced-6a60-445e-a058-726fc7c5e8b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.154.168.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab028bc-757e-4c31-8b1d-3de6dec43ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.155.107.241']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7968fdd-8d54-416b-a9ea-91e77d5370d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.191.166.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fcb328-16c6-4165-98a9-a056849556a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.199.38.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb57a8a-6138-4a9f-9790-8b92b3a2263d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.205.129.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cff4dd3-10f0-48c6-a0af-fd052f4360eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.214.197.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd28ce4-3e9a-49ef-96d9-d77623d42bec", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.56.183.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de27e633-3d59-4777-9bd6-036f6ff78d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.56.219.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb72b72-9e88-475f-a00b-5b754bb75c5a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.56.251.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bd999a-2158-4bf8-9809-9f68d7e311ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.168.186']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde56752-2b81-47a1-bbd0-580287e8a751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.94.155.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ccb6c9-4578-4808-9e7b-307c946b7be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de751351-e14a-47ae-96c8-4c1e1c25b68a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a87a20-da1f-4de2-ae86-62a1b5ff6c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dacb7d33-23be-4975-851a-9f913b4f680f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8edbb086-e06d-4789-96df-5fc26a8605b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1bee99-7f31-4546-b969-88c4d6deab74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.119']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd324761-33f0-4252-80ee-baf6ca34226c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5071414f-5f0e-4903-8979-0661ec68126b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.126']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3959a47f-2282-4082-be99-ca11e4cc52ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167f6925-f7b5-4450-ad43-ef0ff4ba2620", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ab8cda-0553-4a46-8344-9a097362e103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7fe710-46f0-4178-9ccd-0183cdb6fe95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d95532-0172-4eec-9260-432d5b57b270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b69888-9ce1-4fa6-a712-7ace3f3029aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.81']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f59d0b-19a8-42a2-99a5-95268d958588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4cc780-9273-4a68-b360-fedc4a9a67d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef243b0b-4f05-41fa-b24b-84bb87ddeda8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54d5025-4b0f-4b41-9fb7-4fd9a8639d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3544a981-443b-42f1-a12d-ffbb31ccc200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0cd1a71-3fe2-46bc-be39-42abfc1534bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54df5ca4-26bc-4134-8612-78556787f156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5360e8c-9f54-414b-b56b-41ac20260c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5495c2-ea42-4904-80f8-ce6b6c3cd44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff37a6f-9c67-42c2-a4c1-4767a65601ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.200']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80878c8a-ea4a-4fe9-9775-b114e68ef950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e7eefd-7914-4aa1-846b-a84de6272295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fc45f1-7147-4bb5-8bb4-b3d1697c61f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ffa367-e8d5-4eb8-ae86-baa8f0a0d5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09a07d8-db6d-4298-bff8-b4e3a3cfa1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935e81c5-d984-448a-a6a9-0d4624c3cdbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aac8e97-8cd1-463d-8681-10e444c2341f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3223a0c-748e-4443-b154-0e044e272b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31fe8d01-b946-45a4-8d1d-ba79dc3e9662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eceff8e3-637e-4054-89ca-a216b9e8c29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26e957f-c423-413d-9ded-15f3cd498a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777c2603-75ef-49d4-b8ba-44f8a49efd27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86f3561-64df-496c-9eb8-c7befd2fd6f1", "name": "Malicious Host", "description": "Observed: FTP, MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.107.106.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0ac81a-b42e-4863-af32-b3e4cf96a0c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.245.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0aaa2e6-d1ce-4ed8-9f4e-73412624cbee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.32.16.105']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02aec4cb-594d-4b06-ada9-1e72c45f2ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.72.120.145']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b1efb1-e237-4a9a-bdbc-9c9f18fc48ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.72.121.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc601ce2-2dba-4292-9ad8-3aa0ddee3d09", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.72.231.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba88e1bc-ca17-4da0-8402-214104a7f1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.73.137.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af32ca9-c93f-4230-9496-c7f23eeb78b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.87.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e74309-dfa0-45b3-a939-746ba135640d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.157.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e9c086-db76-4b0b-9e3d-c9cd5c34564c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfb897d-c3c7-4e1e-9290-0a06882d9361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.236.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c36228-7de1-460e-b278-b37a2a6a34d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.236.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2edd4ca-dab3-433f-ad2a-bc0328b7d981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.236.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df908cf6-08d1-4db8-aa0e-72743ebc16c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.237.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb8d3db-89ba-4f00-89dd-dbf7ff5dfb14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.237.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0254f0-4404-4a96-b974-55d64cfdca5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.237.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6577d7c7-b1b4-48c4-901d-e6674878ca19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.237.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e6c048-732f-4b9b-940d-2aa965e19239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.237.63']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c67d299-eac2-49dd-b7a9-344c810eba9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.238.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c044c3c2-b36b-44ef-90fd-01c0a89e6069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.238.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df47761-1f9b-4fa1-b451-8215b22909d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.239.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0ce127-e369-4661-a60b-c132b69c7d34", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.117.225.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e726a00e-5e2d-4061-be5e-2a7f713416fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.122.164.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59096d97-a2a1-4b94-ba58-389d4c226c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.122.164.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d2d702-cbe8-42bf-904c-07e61dabc89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.122.166.180']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13caa4ba-0433-4905-ad55-0230786d3f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.153.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eea3474-b731-412a-a9bb-338ab7ade0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ad2707-0d7d-4540-ac58-b1cd168353ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be27eb4f-e8cc-489f-9d1a-eb3cf1b7ac9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07a1f05-1c28-4fdc-bfd0-c2d46f1462f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d24c930-caa7-4860-81e6-53bf345c935a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.90']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110b5825-733b-4f22-b1a1-31cca2b30e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.145.33.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60951aa9-8f55-4154-b11a-3299584bdba5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.146.113.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa885716-52d9-4517-8efc-62571dc57616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.147.97.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12b5ebe-b038-4a11-a7cb-257441a046bb", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.189.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ca2264-8b6b-418d-b7d5-ab8195d47031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.229']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d4dda3-8cb9-47cb-9fa2-afbc42a2b2f7", "name": "Malicious Host", "description": "Web exploits: aws-credentials, kubernetes-secrets, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149, CVE-2019-5418, CVE-2020-5902, CVE-2026-9198. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-5902", "external_id": "CVE-2020-5902"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9198", "external_id": "CVE-2026-9198"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--575f428d-c30f-4b42-8d44-78974b39a7ec", "relationship_type": "indicates", "source_ref": "indicator--43d4dda3-8cb9-47cb-9fa2-afbc42a2b2f7", "target_ref": "attack-pattern--2099f92e-22d5-4f56-830c-a0f433029f77", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94da65a1-b76d-4e7a-b41e-ddefb94840a9", "relationship_type": "indicates", "source_ref": "indicator--43d4dda3-8cb9-47cb-9fa2-afbc42a2b2f7", "target_ref": "attack-pattern--59afba05-d656-48d7-803b-b3f491ed7e6c", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ee559e8-ce76-410f-87ba-fce1b4ad0e95", "relationship_type": "indicates", "source_ref": "indicator--43d4dda3-8cb9-47cb-9fa2-afbc42a2b2f7", "target_ref": "attack-pattern--711771cf-7c5e-4400-8a3f-98333c379d2b", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73ead513-7679-4bdb-8c44-eb8a7ba1c130", "relationship_type": "indicates", "source_ref": "indicator--43d4dda3-8cb9-47cb-9fa2-afbc42a2b2f7", "target_ref": "attack-pattern--ccf3d1d2-e476-4ce7-bcdb-4aa7379c0125", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8821641f-9492-4bc0-bcb2-f0e6aa949280", "relationship_type": "indicates", "source_ref": "indicator--43d4dda3-8cb9-47cb-9fa2-afbc42a2b2f7", "target_ref": "vulnerability--c81e14e0-c6e8-4463-9ffb-b98b2c6a5160", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1bd1566b-6dcd-413c-9824-ae903cc76ccd", "relationship_type": "indicates", "source_ref": "indicator--43d4dda3-8cb9-47cb-9fa2-afbc42a2b2f7", "target_ref": "vulnerability--b4c1dece-ddb4-4491-80dc-4a235237b191", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c26ddff-682f-451a-ae6c-2224d4cec01f", "relationship_type": "indicates", "source_ref": "indicator--43d4dda3-8cb9-47cb-9fa2-afbc42a2b2f7", "target_ref": "vulnerability--30006960-b601-44b9-9dd3-c99dfb017c05", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--864799b9-689c-40dd-abd3-7bab90adfa18", "relationship_type": "indicates", "source_ref": "indicator--43d4dda3-8cb9-47cb-9fa2-afbc42a2b2f7", "target_ref": "vulnerability--a2257583-2ae2-4920-8e5f-444787dcd26d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61864cbe-f41a-4e90-aea2-377c8455c27f", "relationship_type": "indicates", "source_ref": "indicator--43d4dda3-8cb9-47cb-9fa2-afbc42a2b2f7", "target_ref": "vulnerability--51fabef0-a353-4d32-b8ff-98e2d3756318", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a649144d-95bb-48db-955a-900a785b5344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b20512-441c-4004-af14-8bee1cbd3eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b74ad53-214d-44f3-9d04-998d17a89632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabd9725-ff95-4957-b9f0-7e7940095a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.184.68.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75170e80-c662-4c03-9772-372ddf24343b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.184.71.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff887fc3-a4f7-4a4a-b810-319328e5880e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.169.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce11558e-4a8e-49d3-8303-2cd817fbba89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b301d6e2-41eb-4f6b-bdaa-b3448af85fdc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2569eeca-f13d-4a16-9363-d69458a38b60", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2567c255-ea06-4c81-8e5c-858544d32cb8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bcdba4-05c5-42ea-b13a-d5ae480c648c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369787f1-5da1-4f3a-920c-e81467df6ad2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24df459a-ad2a-4620-b584-9fa90b708670", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082ef115-86da-4784-b978-fd99c501d424", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c883a543-6c88-4099-a4a3-900c35d12351", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c78fca3-0c32-41f6-827d-34433794a134", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8eba4d0-d990-46da-97a8-058d68e3e1aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c52a569-d7a5-4da7-a116-2b87ecb400c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b3d7b1-83e9-46e3-8e31-384f16daa391", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2c0ccf-00cc-4097-847c-4e0c5833c1fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93235f5-124d-478d-8fc3-1e9eebbe3920", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b68374-b231-4c6c-af4d-eab356523d01", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228b6ab6-eb1b-40d1-8a58-7a1bb4807dd2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aacaae66-9743-49bc-a96c-2dffb9e09aa9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8527da-e766-44e5-8537-059090fe12cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a661c8d6-481e-46ff-a133-94c092dd9176", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47b34b4-3450-437e-849f-1a3993a9d800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.196.220.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af62ef7-1a05-4183-b6ad-08b74c302b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.252']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7995975-9a2d-4c36-a89c-0d2760544356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244f9dda-33e3-4d75-bcfa-a72f8d0246bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b04453e-a881-4e72-97f2-26b0de910b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e40d6b5-8947-4a05-93ac-81c95c283fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8578b1f-55dd-4610-81a0-b9c802d2bb8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.80']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b6f123-54bc-4993-95bb-b2cab007e91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91601fd4-e75e-46b6-8f73-a5ff79e4bd22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.201.253.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551fb18f-bed6-4bb1-ac01-1dcee135960e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.215.151.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c99b863-ec45-47c6-9821-b9499324b0e5", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f2f043-2e57-4d68-aceb-713edc57cfcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5ca5cf-ffab-43ec-8810-8820730f467e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.169']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a04217f-79ab-4484-91d0-e463c45f2dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05e5a2d-48e0-45e0-bbef-39b396943013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81d2dea-7101-4276-998f-3107adda8e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274ec2eb-9d4d-4d91-9758-1b8f78e38233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.183']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e66f12e-4103-4bb8-9a9c-33b513c1d384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.0.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dba9bde-04db-48a3-81a5-2744fc8742c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.221.237.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63962e0e-e75c-4675-b851-0ca79d4ca845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e74881d-00c9-43f2-babb-b457b2abba94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5216ae-116d-41f5-b168-49319965f3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482b1bb1-4c46-4a29-958f-51fab105bb86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f6a15e-931d-4058-9b13-524fbc824dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37eeb8d2-0d9f-4da3-9c4c-8802b9bf8292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243d0e7b-26a4-4717-acc9-28b12a647b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61106c77-1d15-4bf7-924b-fe100858a17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb70cc75-5fa5-48bc-bd1d-b385129be09f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd8d844-d639-4a71-9c10-026503df3846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92e647a-1c3b-4437-b3cb-05e31fb8a384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.231.33.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969dc2c5-80ef-4628-ac9c-f9db9d29e4ee", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.240.215.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351ea9a0-b092-45e8-9b2e-8a4f80469da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.240.67.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823377aa-981c-4978-82c5-333623d842fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.103']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e5bda9-6253-4863-962f-7ac9041895e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc227bbb-540e-4318-8c24-36e4f4ffd88d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b867af6-d35e-46c0-94fb-69806311c50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e242404c-4e4e-4221-a424-33756a31ccff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea79f69-3240-4027-b492-04faa4a0beeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120020bd-e084-481e-9ad6-8f71006df526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.33']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93dc7ce-eb06-4806-91cc-2d6799f1b1e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a90d6f8-952c-43dc-84b9-57df48455edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1599241-ed95-425a-b642-eeb8e17a39d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4dd8b97-779d-4301-af6b-1d7f741f4bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e61ea6-88da-4ab0-986f-d47263c342d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f58580-b853-4bd9-aaa0-b4bc5acbdccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12824e8c-9875-48c2-b134-fa5b5be0b871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992ddd53-4563-4ffb-baf7-4e7e6ce2d7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c957e27-e1b4-4137-af5a-4b9199b60263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc61e3e-668c-49ca-9f5a-ee0c646d0eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95637c91-58bd-4778-a68d-2da563aa9866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3fd6082-9f55-453b-acf5-5aa7dbe22fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c82490-fb56-4b28-b5a9-1422a9a2b932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c343c4-42ca-4628-9772-e88d6d0859b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90da527-56cb-4af5-adeb-fca21d6e004d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.246.130.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772114ac-565b-4312-ab1e-1fedbef198c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.3.93.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec17eea7-c99d-49c2-bba5-3fa9093ec9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.61.78.126']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad627ebf-4a99-4fc1-ba9c-fb1dc74d35a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.214.154']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7aedff-e830-498c-9690-904bdcf04d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.23.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc2a7cd-893f-4ead-a5e0-3b121aea4225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d64c8f-887a-4d07-8f66-e63354e739c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff38bca-61aa-4ba5-a237-be09276a190f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3ac604-bc6b-4d47-b7c8-8abbdba3d79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24eb9dc-096f-4034-a853-3d4fbcd721cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301c4a1c-a989-4759-a710-181b6cc03dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.94.111.1']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da54354-f197-4dda-8adc-7932b7db4084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.1.93.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9ad060-0768-4804-850a-c585ddc8ac4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.108.238.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63e8d9d-c70f-43dc-9400-e0e77ba1de97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.123.101.126']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9e59e5-6b81-498d-86cf-53226af2bb35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.129.30.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b98bfe-52dc-43b9-b2f6-be68aa7a146d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.155.93.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac7ea45-ee0d-4c1c-9c86-626ab714de25", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.158.120.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab35ba3-1204-4522-976f-e342994f88c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.19.22.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431cf727-3bef-4052-83c5-9428c1ff6742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.209.210.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df28afb-f71f-4464-8a7c-4f4599579ef0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.216.254.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d16977f5-7bee-4a29-9b76-fe17bb1050be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.22.62.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172d5cd4-2be0-44a1-b0b9-1b70d2007cb7", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.233.53.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e12ee4e-ce42-4797-9947-00cdb2d8bc9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.26.85.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a486264a-dcca-4f3e-806c-bae021a45fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.7.121.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145c7ad4-55b1-4fa2-8128-b330351e454d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d842926c-efd1-4b19-ac07-8bf1a9f34954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.25.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02457bf5-d769-4566-ab40-10f7946104e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.17.224.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25bfce6-0776-4820-a5ab-c34600ee8ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.180.166.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a6d55e-afd9-4e99-96ab-9d6d6436e282", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.226.51.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74eccba3-0ea6-4f53-8ade-88a9f8bbb307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.199.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccaddbc3-7dc5-47ca-afdd-275fb8e2893e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.49.58.33']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d523f844-d943-4ef4-81ea-e98f4030e964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.57.131.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e450d2-f944-4cc1-b14e-bc014a79158e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.58.201.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1a78a7-0884-4be6-88e0-acbb8ca2d8fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.62.204.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70990a52-e122-42eb-8efb-2fda1e346a97", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.132.200.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41cba612-d6af-4489-a58d-c3a894af46f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.107.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855cdaab-0c66-4c97-8ded-457089930b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.156.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ab9630-a5a7-4f73-9ad6-780b66e3f977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.183.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186ad56a-ae5d-42a3-bf65-148797f98273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.215.152']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67676e9b-93a9-4b63-b27d-b9e372cf8e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.235.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd263b8a-b591-4baa-9556-b89a65b039d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.41.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb91bb1d-f98e-48db-aabe-5bb68e01cebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.63.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73da5d49-acdf-4113-89ce-c893191a4cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.186.201.143']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73152994-d233-4e2f-b8aa-b0953ff5cdef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.194.202.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e2ba83-4773-43ec-a737-509b2b45f215", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.211.216.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d70aec0-7ad5-4e62-b43f-e25afd723d6e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.214.104.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92667211-4a3b-4ae3-bc29-8e22d626446d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.225.122.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c21995f-fa63-4a9d-ab09-04e305ccae0d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.239.219.158']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad00122-1a57-4737-934a-7338595b5d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec69d9a9-cfc1-4fc3-90ea-7c6d3013c86e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0afd4bbd-5c7f-42e8-8be9-74fde76f8d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a333a166-9c6f-4a76-ae30-903b667f73da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b20995-0202-47f9-b2ba-a7b273ed0108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4bbd02-ff81-4bfc-b250-d9795c4710dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7f194f-a438-476f-a190-30d1971551c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f11d4e-a8fa-43a3-86f0-e5391e857854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.241.120.4']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50db7e22-409f-4ad0-99d0-8d59c2a20880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.150.75.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c95978-0588-4802-8375-15155848a4bb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.151.34.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ddc51eb-e420-4bef-b184-a860369c7127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.160.16.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4684b325-4c56-4811-9e00-65cf40a908d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.163.20.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b91b9f6-5ea1-49c3-b645-bad50660e572", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.190.217.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f66e74-25a8-4593-8c62-85f27aa2dd6f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.203.131.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08448b70-0ec4-424a-822d-cee52ebe0bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.203.235.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49179b67-2a13-4968-b604-66de0802d2d9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.237.228.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b4aca9-5d9c-4594-97f1-b090bc85d602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.102.52.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735b2b52-ea13-4466-a32f-efc84c1d81ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.104.47.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063d819d-6634-462a-a4e9-9d4444a0ec7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.124.183.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403193da-25b3-4b23-b4a4-d8291787b7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.145.231.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17206214-902f-4fdf-98b9-823e0c83ce11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.148.107.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9d4d63-5033-4a6e-81c9-6764dd7e774f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.179.196.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44074089-d908-4746-9621-7a9d1e560abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.228.134.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20684201-638e-4b27-adb7-f32c3d6d2240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.229.10.252']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65edd586-8706-44d2-b5de-924f09d29a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.55.123.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a3cbdd-d569-4be7-a41e-425c985ac400", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.56.130.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b39a0a-597c-441e-89ff-80a7252b9b33", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.92.148.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94fcfc5-4317-427a-874f-ab716a21244d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.93.229.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54dd758d-329b-4ce6-94b3-33bdf3dd43b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.7.113.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270c0a72-84e0-4022-bc58-cecc9a62edfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.82.126.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e694e7-1f67-4809-a08b-982ccc441a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.101.68.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f41deaa-e76d-4a1a-9364-e642429ca680", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.37.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e702ff97-3f72-453c-bc59-7772309bcd4f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.37.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88fe2cc-28b9-4089-a02c-5fcc5117dd22", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.144.148.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7271f1ac-081d-4f51-aaf0-0aae1a896aa3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.144.228.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a50e01-d9a7-4d94-989c-4cdb9b160ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2591d1c3-c55e-4407-b8f2-f1668353530e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b731b2-3379-42ee-b0de-3b3e430bf986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e90f67-97bf-473a-a2ea-82b46e614a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519c3f06-6028-421e-abce-6f510c1bbf72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.159.99.144']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a84b01-5ad7-4f91-a1af-c822daed464e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.161.49.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719a8e33-b5d6-4855-aabd-c942e5576b2d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.166.132.81']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361c89d6-ce2a-4e3b-9647-661264abe674", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.250.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95bfc67c-da8e-43fb-bb85-4abaea3f2085", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.229']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f76709-c2cf-4c7f-b428-be4e20951c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.34.61.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a075ad-5c7d-4256-9caf-440483852c7b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.36.109.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36cdb41-acd1-4f95-98c3-c27b6d18bce3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.71.70.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d200fb7a-b7bd-4499-aef6-dba85fb9419b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.131.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931376db-2149-4125-84ff-b712b85366a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.131.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc0d1e8-20a9-40f4-a68c-c740b72b901f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.132.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96e0398-015a-4a98-8039-3e1264c9b639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.107.107.174']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37c7ab4-ee53-49be-a364-1bcde16c5e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.107.107.180']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6146cc-f7c2-41e9-ac6f-a18bad3f65e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d55724a-b4fe-42e6-9e55-4d9de6467464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.229']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6ae5bc-82d0-480a-9557-1aee81c55840", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.141.65.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b805b97-51b5-421f-82c7-1b09e06d35ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.147.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc62300-b1c1-4907-a06a-5b9d58eb1706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d6737e-0d90-4a28-915f-c171f9bb1245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.183']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20801b7-b70e-4add-bea9-676c784f04bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5cc8a8-9e1d-4329-999d-2c77b00225eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6d3a56-ebf7-4f36-93e5-9f303f7b3c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.186']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1dd51b-83ea-40d2-9267-546057a88538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9955a0c3-3aac-401f-bd29-f55f938c4fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ae2fa1-e160-4881-abef-0961e1543a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cf0bf6-0d48-4bd9-81ef-da86477b6245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467ea5f2-69e0-4bd1-8c24-eafbede45b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbccf5cc-1b45-4ebf-9058-d1102b8329ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0378a7-2520-44b0-a17c-78bff46150d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9f0da6-920d-41f6-bf91-762f78be4660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be89588-b285-4b04-b2ab-821b925313e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4bb63e-31af-4a2f-8b84-195f48d9bb68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f948868d-b785-4833-bc8e-8f127176487f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0ef005-7197-4a12-8b04-57e57777b6e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e80e11e-6c35-4afa-bc22-296655792375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31f2154-4959-4e29-9adb-147e2c1172fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.200']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9bd13f-d992-4d9f-8fb1-c875bcb595c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0395ab-fe53-4951-b806-f690a293ee19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04feac1d-a38b-4f13-907c-f676e0b6eb98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0602c83d-6db7-42a2-af29-752c1810c871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3341a244-ca98-437e-95dc-72a74f6b15a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.205']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31660810-4d07-4726-b44d-220947a011cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5799a9e8-aafc-4ed4-8be0-8ac2982997c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c5ec42-f440-4aa9-8f58-25fbf90d6385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f59f75-18c0-4cc7-836a-ce436c78cd5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742b0a35-1a1c-495f-8716-f6cb458e7264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03517ee-a4d0-422c-b029-d34b3b782080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e8a551-dab4-4f93-b142-17f5cf3f1dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426f0841-343e-4ca8-ac51-e2715ccabc26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.214']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118e00b6-69f2-4dc0-865d-7f71fc28eb64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263c470a-8730-466f-9e3c-e4c40e0ffc79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b58a71-55e6-4b5f-9ab5-830dc88bbf8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e10bc4-2fe4-4e58-ac26-09013f909e82", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2588a1-aa0c-410e-abc1-f7bfd44504c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691430cb-09b1-43c2-afb6-c0025bfc924e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a1f5822-3026-4cc9-8d70-392b0e78003d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1556f9d2-5602-4365-9a3c-3b7abb3a1fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68cd99d3-5398-4eab-bb26-472435612361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185ba86b-75ee-4624-8efe-433a461a5e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.235']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37659292-c0ff-417d-8e78-4811ce84532e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6734acaa-9d0f-4699-a282-bab862c64ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd59777-8ec9-4aa2-b5f5-f88270d53659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840eed9b-0d5f-4e2e-a627-55addfc6b0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.228.135.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79bb06b0-f35a-49f8-aca9-51e99eb0e031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.23.194.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1032802-d2ee-44cc-a8d5-14df1019ddab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.233.130.126']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66bfc895-0998-403e-b657-8da833c3cf13", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.235.141.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d138e352-863a-4dc4-94da-143895a3b05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.239.234.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671b8d7e-e10d-4dbf-aeb3-6169f7a10702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.123.63']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2d4451-dc95-4294-84f6-441182b477da", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399d7ecc-9027-4b07-b7e9-dca970a11509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ddeb94-12e2-44a1-b833-c96cb2295252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfcf694f-499e-44da-85a4-89a2ac1a9c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f64a092-a1f7-436e-a536-7480201833c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8db54d-b1d5-496d-bc98-bf436f3a3ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a57e959-ac48-4a7d-ae4a-b2f54c8a5270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2318fd-1c68-4c9b-b1fc-66c1e6aa5105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.127.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35b6e2e-19e3-464c-ade7-99be77f25d12", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0c97d0-0856-4cc4-829a-ff072d7bf1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df6124b-fbdc-4338-8cfa-83af2fbb3908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.229']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c944a453-5873-427b-af7e-4ad88cae9ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22d1f37-d225-4600-a8ba-d27a0971e919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e4f0b8-e4a1-42a5-93dd-d0f656110940", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f406d0-cf43-44b7-a95c-bbf03005b758", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.47.62.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c709235a-0fb6-4e89-b9cb-774a84038fd6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.56.113.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33dc6a2-ff0f-4e03-9d81-49e9e7465aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.8.186.31']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97f7ba1-5496-4b50-b506-5e3e6350a6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.102.104.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3de44b-8b0e-4192-9465-02f6d3b45417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25d73a2-b05d-4bd3-bcbf-d65bc9c9da13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.49.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9606ac97-dbe3-4376-a8c5-e5399d7ec6a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f58fdcc-65fe-4cf4-8a59-364375825f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4255aafb-3171-4096-9ccd-ccf108a59825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7145852-c543-4e04-95b7-5cef718f58e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecc8132-588a-442e-8d94-9d0ae09a4515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.164']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2424110-fdb3-42f8-a585-3ef275acf9a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8183ab87-7cc5-47e4-96d3-e1efeeb22171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6878a168-6eda-4aa2-8925-66bddfc13dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f789d87-063d-4daf-8b01-3c5615456d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3595d363-e0bd-40f5-a71f-8135ef4a509f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a613922-29a5-41ed-97bb-694a3e74f988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d42f7c3-fa83-4dd1-b150-c78c9bdce32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a7cb89-2d44-4e8b-b99a-71bcdc12d47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8463b5b-6950-49f0-a7e8-9eff23524bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e008aee4-afae-42ea-b8b0-72da232b839f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886019a2-0be4-48ac-80e2-eb9e93f51694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.31']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9990f4-6407-4c49-9542-0606e73e8d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a01823-406d-4a28-bfdb-f34f58f60af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b997e0-52c6-47cc-a5c6-9653ae447514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab0212a-80b9-4522-8992-c2a4680a677a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.208.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561dc86d-8363-4169-bfac-9ef4cde9ad42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.24.161.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7176aa33-dbff-48d4-a4e6-aff5fa8e6334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.39.67.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13d5cf1-b960-479b-a41b-abc56e33ef51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4e121e-fe9a-49e4-8927-9ed7fac42feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbc6525-a5cc-4de4-bd93-86250c438a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309bf27c-8cc9-4f6f-aaea-a935f55637ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e62bf0f-adae-4bb9-949c-de6f6aafcd23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f83e71d-f42b-4e06-a7e2-624d7aa17584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f43693-cb02-410b-81de-22f8cc8413b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.158']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27258cd8-c833-482b-9596-7deb559e490f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.61.33.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b44c03-45ae-4aed-8dd1-563f56c41d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c788b2c1-2feb-4d5a-80e7-f05fde2aec74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae4c388-967e-45fd-80e6-ed30b588850f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6227d85c-c123-48e8-b190-92c94a263549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.108']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba70ddb-ce49-4ed7-babf-26adaee6e55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee86c481-d7ff-4259-b4fb-cc2fc48e7410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e64904-7b30-458e-9a2a-223e3fa4b6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550f0ee9-faec-477b-be52-93e03e5a07f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e1866c-304d-4bce-8b12-c8d3da3bcfb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9b8431-3ff8-41fd-9e8f-a91116adbc0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11be35d2-2568-44f2-8989-6c76b791b11d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.90']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c546cf92-b3ae-4924-b14e-64db54309f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb3d03e-6d6a-4daf-83f5-90dc5b49189c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.114.144.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211635a9-a4a9-4596-bb27-4e6cfee9e1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.123.210.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94282ab-6c04-48f8-b4d1-7435060e4ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--234c7de1-c630-4f9e-a321-925d47084af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.177.94.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859a432a-4c42-438f-8aec-7d8cc8ac8723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.177.94.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97729bc-a8c1-41cb-be6e-5ab82cc1e003", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e5d98d-aef9-48bd-8cf2-95b950e53c6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45d8082-b3c2-4e73-a25a-14bbbd5767fe", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acd109d-d2c5-477d-84f6-62ae98f9e73a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b043dff0-91c0-4506-84e4-60aa66bc7fe0", "name": "Malicious Host", "description": "Web exploits: aws-credentials. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3873ddd6-c11a-4b6a-9976-c23a8ff28242", "relationship_type": "indicates", "source_ref": "indicator--b043dff0-91c0-4506-84e4-60aa66bc7fe0", "target_ref": "attack-pattern--2099f92e-22d5-4f56-830c-a0f433029f77", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fb59408-410b-4bd7-8a0a-7f98beeed1ba", "relationship_type": "indicates", "source_ref": "indicator--b043dff0-91c0-4506-84e4-60aa66bc7fe0", "target_ref": "vulnerability--c81e14e0-c6e8-4463-9ffb-b98b2c6a5160", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd23a13-0b15-44b0-b649-2cf59c9a8466", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f27d83-a979-4881-8b8f-ab97a9b69f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fef314-71ac-4e00-8b4f-e36f3fba9a71", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde42c27-b59b-4421-96a9-0df979e78ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120e7567-9cc7-4b09-8f97-3b1d493a509c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.18.27.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86dabb94-0ca5-4c0e-a4d8-82d86af024e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.182.16.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8968cc11-895f-472f-8032-e1b980e7d558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c3fc7c-fb20-46dd-80eb-ace025165b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8582f0-6e4e-4bf1-adbd-93d772f0d705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0172f3f-b492-46a0-81c9-942254c7e143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16713ed2-47bb-4606-9e62-4b824f868b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262db50e-b896-4d42-9aa9-9b6985219461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87acc506-075d-4344-b508-c50318a43bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05ebf92-eae2-4d9e-bce9-fc1c44b6885c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3bdddb0-521b-4a67-a543-cad2740ddea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07386595-de82-41ff-97a9-b35cf5ea2c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546b3ac2-e1a9-4935-b7df-f906a42d2f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d5730c-0f7b-4a0a-9102-e239a47ae386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92647d8-7c53-4e35-bbdc-7cfc55b27259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1367b444-cca5-40c4-a0ae-d6077dfec173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef778810-c6f9-4205-9d43-9237e5ac0839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40597d4e-f378-4da5-9d73-2baf53365759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29ea9c5-28d9-4f70-b6f9-0bb98e442725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3261231-9dba-43b7-80f9-631b2b28b729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1133282-d4fe-4855-abcd-51a641273c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c90d991-3263-425f-8dc4-74a261efb9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d75705-cf3a-4aa5-a4af-52364956dc5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c53d40-22a2-4f78-aa78-c35bd9f7f98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38322726-ebc3-40c4-b985-9f05879b422e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f88fdb-89a1-4aab-b542-9d3e0229afab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0363fda-c5f9-4c31-9d33-902c50d947a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751dfded-c564-4b6d-9385-ee38c68aa306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfec9dbc-11b0-4b94-8370-3d121870c563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0af2f1c-1e27-464a-b794-97be77cfb3a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec003f1-c083-408a-b3c9-bef52c33c9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fe238b-ad06-4cc9-87cf-44759fca9381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b253b150-2fca-4a20-86f7-9d8f9c5bf13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51442d6a-1a24-4669-808c-2456bda0792b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46c66e2-9b77-4d9b-b5e9-8be266fcca52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e44ee0b-e23a-40c4-962c-dfa047bfecc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62697775-f907-4c56-b749-19c82e37059a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1d49e2-234b-4522-888f-d5eb587b4632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.63']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c375ae-7e83-41be-a205-4d3ecac27ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94d7a87-d056-4781-84d3-0d94e47f2281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c99009c-b52e-4e8b-8f60-7e0de2bb3405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001eab67-8996-4474-ab2c-569b31c95e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149196e4-80c5-4707-9521-2d3f840b5273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3047c023-aea1-4693-8d43-e9636b8809ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3899bba-e4e1-4d06-9ad2-0f9ebd81e4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a028bb8-ef62-49eb-aca0-a12d4eeb2945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.222.59.154']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184380b5-a315-45ac-991e-3ef3093df576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.228.92.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57055138-720f-4b82-a12d-4e77111e824f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65ea50b-b2de-4cef-a0f4-fdf91cbcbb7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbaef17-9851-4ba6-ae91-cf0f5b12db87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db8ea1c-cd7c-4a65-8d63-1c978d32f016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c27cd85-9ee7-448a-8fbf-8a9e4139a390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2f8e2a-cad3-49de-91f9-b822f69326e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.249.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bf8ccf-3c95-46c3-9010-7888b36ad6d1", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.138.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f120c7-77eb-4a67-957f-d3f4a6c0e4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e5635e-ce28-41cb-9649-9f31b9bf7c6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.27.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb76152f-a482-4643-bd04-f7777ab65e20", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.196.150.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da0d8e6-3ab2-420a-90cb-19fba79fe1e2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.200.96.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3df178-a84c-4223-be6d-c6b1fd5390bd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.49.56.119']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37f422a-4111-43b4-bf3c-b543b69b00ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.70.197.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47fc163-1ac8-4ebc-bd61-53a8a8f6d3d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.15.246.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d375cac0-ce96-4cac-a142-f2b5b2fc2940", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.250.101.13']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19564a6-878e-490e-ae6b-f2573f80ba76", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.253.124.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03047f0e-46c4-4b68-a5eb-5da44a8b6000", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.253.54.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aece048e-22ad-4609-a3b5-6bcfedecdad5", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.35.64.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ddb5daa-f34c-44ef-b94e-39a9b11c5035", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.85.190.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aad8d03-5f84-4380-a5ce-7342ec02936f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.232.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62a2c55-343e-457f-9a22-284a9f0acb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1703d544-b867-4ef1-acfb-8b7996f4d65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.101']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e714783-221e-4851-aab3-3d60e815bdb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f3e2a4-60c8-4c38-99e0-f3626f3b45c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c405ce-0144-4e13-85cc-6194e6be7080", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: digitaloceantoronto, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:openclawglobal", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a12a528-e900-4d5b-a22f-e561648f08be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2007725-36cd-4d00-a6ed-e9a920f2e0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0d1e2f-e124-465b-8fa1-f34f1d9ac25b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd8449f-d224-4216-ae06-7491d27aecaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe9514c-29e9-4714-a077-274f32c7ce8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa98c40-c280-4926-b2f9-8bf5a332b131", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ddc7e5-c4ff-4ad3-b7fb-64a5d656357d", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12f0cb3-42be-42f1-be4b-91806118b580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723d0cbf-c3b6-4c33-8750-96a5895634a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967bd95d-67cd-47c3-84c4-4358298c0e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5a8217-6c36-4b7d-9ff0-4b1a9cfd6b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de484413-efa7-47fd-a082-d770ccd25532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1d4904-8487-48c2-b327-e150b9289b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf612af-b372-456a-8555-193300ebb3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa44e13-8632-4490-b9ce-3bee36e791f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.145']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2dd065b-b264-43b3-ba5f-6d08e3a4c998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.152']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f903a1-0eae-4737-a622-cd519b2bd436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.153']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3d8df7-0e4f-4802-877f-1ea4732e4243", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e9cdaf-0ef5-4063-aec1-714c72beba8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ebaf0a-bc50-4bcb-86cb-9eaf1a0e35cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004c1cd2-c857-4d58-8502-37488210e62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbef86ce-279a-4aa7-8e1f-540ddcf47520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9a2baf-b7e2-4276-b156-e62feacaac29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec976508-cb0c-4dae-bcb1-652790e8e5b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc0cbb3-6bce-4045-ae3c-65502515a272", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cb6dcc-fc81-4aeb-b8a3-19cda493d8da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f41dda-c93a-42f6-9506-06f0c43026c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddaab81b-6c06-4f8f-b3a5-fca431fc34a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d19c45d-a512-4ddc-9bb0-ee17755bf8bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c6b3d1-14f0-498b-984b-e6054d43ebd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02179fb8-859e-4daa-9861-0d259b907411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4db20a-ce14-4220-b5df-edf2b2dfb986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bbd7fa-f1b6-4bda-9e88-22a301e73801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e4ba10-563a-408e-b3c1-46f75557200f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a9b366-4989-4b27-b49f-1e1368f18c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc969a2-a267-4620-8d93-05dd0dca5c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21464397-97f2-4330-b326-95fc618c7838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36fe7e97-cff2-4b50-98ef-8beada50a5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89063d5a-ed2f-414e-ab4f-89d1ea847f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2036fcac-cf7c-492d-a210-0182b0333597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8197e9c-562a-478d-9522-3e91b7eed391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0a2884-6106-4f1c-9320-077d78ea063d", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73713ccf-2233-4c31-a9e4-df01caa7dd0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04dceb9-6b39-40c1-9b3f-08ef4f4690e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eed792c-5aeb-45b5-abc5-6ca7394f421f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0643fe55-0c53-4633-8832-b4e45908a6db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a951e4-00f4-4942-8b24-46f5f5f90ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d30ea6-a668-4f14-9624-eaaabe974e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.214']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3e5452-5ad9-4e19-ac44-7906fcb67873", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9d2021-8253-4d3a-9c39-db344890390e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed0a958-2fa9-4e4e-af87-a276707bd748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2454550-dde4-4afd-a561-92b5fa596d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a9a3bd-b4ab-490f-87d0-ce0c859b31c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bf7e2d-ea44-44cb-9c0c-813cd0b3613f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce0603b-1761-466b-9dce-a0b0efc9da4b", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: digitaloceantoronto, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:openclawglobal", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a6a7c4-9ef2-490c-a101-59123fa4b2ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08818c7-3b6a-4cd8-9d04-26b1c055889b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1730d1ca-5a5f-4cb3-ad73-78f6137b35d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a92783-08ac-46bd-849c-76605f2a0c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ed1b40-37cc-4596-bf50-f5b2066ff3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c338c546-227b-4de0-81d0-0d10fe57c5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4d921a-14b8-42fe-a41d-89c7207c5960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d896bd-4cc2-4f08-b5d1-54e108eccde5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0cda9ba-6436-46a8-9f39-7a11d218ee1c", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a41531-1dba-4eb7-9e73-ea9d7971cb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491cff7a-3c99-4060-b8f2-3cc3dae3a33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6396fbf-e9c2-4722-9386-ccc2b6bb543b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd093b6c-73ef-40dc-b542-eddc6321364e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17986c4a-db55-4452-9b9f-b1607fbccfe3", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.255']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ecc0a99-7d78-47af-a398-876d4e4a131e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.31']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdbb9dc-079f-4a1a-815f-a0b995e2c551", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.33']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e15f891-2c8c-4d2d-9ec4-3378d6c1d618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e0ef5a-65cd-402a-9643-afdb030e06f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6d7516-bed9-4725-8cb1-36284d0a603a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae6440d-4faf-4434-af83-7f954202053e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7c4695-ddb4-4163-8354-3f7f228859a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5d5dfc-f122-4c40-a75c-1fc45e47b18d", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547cdf6e-413f-4fdb-bb01-15ad35298ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205d179b-8123-440f-91be-740cc14fef78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29429953-2217-4a2c-bd23-cd42011fdfe4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e20ada-f9e2-4955-a279-74d9350b36d8", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9184ca-06b4-4742-bd75-4a4a298296d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ba5c47-edc3-44a5-9da1-44daf7bc2afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bb6163-809b-4d2c-aab5-5c150799b496", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b62338-7761-4a23-8158-15a1c412914c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96673325-f3d6-45a0-b4ce-f67e1090fcc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f460c4c3-5f66-4806-81f9-4f04b09549dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7a9d4e-5774-41f6-b94b-43d42377e9e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ab567a-0fdd-4e4b-b07c-a169b4e86496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5150dfb5-427d-4527-a591-54800ee4d6c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40c5ead-70b7-4ebe-80ad-b2972f0c04a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8793eb4-9605-4d97-9821-67838d231cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950e3651-8c0b-466a-9d02-0cb5aac55221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be99e191-b5c4-4922-a072-b4c3bd7ba3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4894b9c5-1282-4937-94de-c35702a74d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6e5341-2107-4d36-a45c-2fa0cea77ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a947d910-c3f0-4c41-a575-c6e95c1e58a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db376420-beb3-4632-9f39-3fe8d0aaa96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129779cf-cc8d-4e1b-ba4a-e7db89bf5684", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130b492b-0218-4374-b656-106e8f7a1b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17737dc0-e462-49ae-9109-83908fe7d448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c839a70f-4368-4358-b69c-70ab1b2cbbcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f25ecd-7afc-4aec-b0ea-38ea44f49e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677ff844-0c3c-4193-b43d-c212ff3844e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd2dbb6-698d-4f2c-86fd-868a348a0d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b036641-22e6-47b8-bc72-12661b32e30c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35cb61ee-23d3-46c2-9aeb-134425f4cdf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1dd5787-d9b3-4900-98af-0c7426b266c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.244.168.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fee1290-d027-4cab-b09a-7707906e9fcd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.244.240.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084dabd2-9bba-4f14-8efc-b9130a00cd03", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.218.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a36a3b9-ade5-4696-92cd-86b766034851", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.237.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd1311d-ee15-432e-8993-20aa23c1ce50", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.71.52.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4c0715-f1bd-47b7-afff-bd3c6d923e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca99a509-01ce-4cb6-a661-27dc8698058d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3884c939-4afb-42d6-a4a4-17f513ebeba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df399d2-695f-459a-9e14-86d2fcf76ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a954a19-aecd-44e6-8acc-160456ac624f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a2561d-7fe8-43e6-874c-cb423801fa08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911b4e65-00a8-45a2-ab28-aeaf189e11f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35bc0e0f-1f33-4c93-9a60-4fe5d093c499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198f7501-22c6-49eb-955e-b4bbc2d67151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f15b9f-adad-4104-86a1-00bf5f405ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0466ac2a-2a1b-4973-8524-3d29f92baa7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43005b76-afef-4e61-a188-3a65e80f4116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5907ca-9a0b-4a72-a98d-88806928771f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.58.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f13dbba-0e89-4450-9c8d-7f426c03bb31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.250.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cfb2727-2362-46ea-8066-908c7b71c619", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.252.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5a39a4-0675-4d26-823f-065158cd4959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b84c20d-097e-41bf-b493-f8ed452d11c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b96d29-c4a0-4b4a-b1d0-61c2d23a3b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acac9fa-ce55-45a9-89d7-0567c04b670a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854a171a-c643-4cdb-a070-9e6c5b8072b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ddd4189-2180-471a-95a0-2ac5d777c7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a816a13-57c5-48ef-94ee-93e3f27f5051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e5efd7-745f-428a-b743-7028b43245b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e321972f-86d0-4637-aeba-806ec1bb3503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7228c503-5558-4c95-9f15-ea0323f47880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c914b6-b441-41df-9424-9cb97ac3fbfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa5b4be-63e1-4109-b251-e8b22f2e9108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f3abf4-3340-4f2d-8dd5-d35f4ebc88bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4f351a-9f03-4ef4-bb4e-4c98623bb517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998f99e1-7ff2-428e-b88b-02e1625b6f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8299f7-c3c0-40eb-b0cb-5bd89e273dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2b8bd3-280e-44c4-bd77-ceda45a2577d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900472f3-f2e2-464d-b841-cc1a2958a27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789a63cc-f17e-4df2-a216-066cb90fcdcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cc84c1-6380-4215-bdc8-8d7425b27066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350f8faf-0a96-4aac-8183-a1fc8830ca4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2059f2a6-d4b1-48dc-81e1-180eed50a8e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699572b8-305a-41d7-9b3b-51219e0ec4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9f509b-eea8-45d7-8ece-c91e59ef7d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b78004-9e97-4f3d-abe3-a17ef6cd74e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72d1faf-f0a1-460c-ae96-a0138a47db97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362a043d-b14d-41f4-aa03-0db32acd0101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675ad762-e5a2-486c-b7af-e1ea19c8666f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f0796a-8a06-4e08-ac7e-245f8b2d0937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba4a15a-9bf9-456f-81e3-f98897c14b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb70f293-bcfc-4107-96f8-1ed0bf5fa004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1feddbe-4bc5-4322-bf8c-1ba17c76f572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ce41d1-116b-492d-8aa8-309557894d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95176b95-f424-4742-97d8-44b82e16f12b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf0c86b-0986-4198-ba9f-819043aaa381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19c1a0e-0994-4faa-a7d3-79cf272f5856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e219e05-c6ba-440b-9446-69c6edf6efef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac106f4-493c-488e-9eaa-8a4b08038d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86053cb-79c4-4106-b6dc-6e89a3647844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e942e0-3953-4425-899b-b047b30ccd6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c2018e-80fa-4bf6-a450-f06ff8e2dcba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9172c133-a759-4e2f-99b3-03b1a7cf114a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.91.221.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e73adb-c2b7-4495-9989-77aa2043be58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.179.177.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c12a7b1-c756-4740-8389-d034d57f3ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.97.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560386e2-283e-48f0-a9ef-f17267df8332", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903e8a95-85f9-4ee9-80dd-5e7d5edf9578", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25699f7a-acc6-4419-a57d-d7d3b902ae41", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.150']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05db71a-a8de-4ce6-8681-558d0d7be96b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.168']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003d7a31-af1e-4eb7-b97a-944b90d55196", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3086b247-9b41-411b-b2ec-d8db7e950967", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fe241d-9dfe-4706-88b6-d603fa816053", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a3beca-6eda-4a0a-a393-6cf2572456f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d912328a-d725-41dd-833a-1c90af152433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.58.202.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69857c85-7886-43c1-89d0-878680919c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.59.169.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc0f90c-856a-4523-a957-48cc94e63c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.61.37.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7fb9da-787b-4aeb-ad12-33da4611664a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.1.169.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa44f493-c43f-440c-8bae-1f33aaccc74b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.115.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b55e9a3-e84b-45fa-9874-755a4f9cc648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.76.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd2be39-63ab-4ce8-8c3d-155aeded428a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.91.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6577d94-3996-495e-b220-842786472cb0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.98.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76cd727-e4ff-45ce-bbe7-91f83fc29b8e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.104.104.62']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d793e7f-30c1-42f2-a4c4-f06ed4f1e3a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.186.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077ea86f-8308-454f-8ffa-d8a14ef0db7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.196.31']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c2d5c0-3e80-43c9-8b13-d2eae4cb8d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.114.175.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8771371-bea2-4964-82ff-0fa679b9485c", "name": "Malicious Host", "description": "Web exploits: aws-credentials, spring-boot-actuator. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '20.114.196.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06257db2-18cf-44a2-876c-33a60bea4d0c", "relationship_type": "indicates", "source_ref": "indicator--f8771371-bea2-4964-82ff-0fa679b9485c", "target_ref": "attack-pattern--2099f92e-22d5-4f56-830c-a0f433029f77", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69156c37-a38b-4830-b830-303264681acd", "relationship_type": "indicates", "source_ref": "indicator--f8771371-bea2-4964-82ff-0fa679b9485c", "target_ref": "attack-pattern--ccf3d1d2-e476-4ce7-bcdb-4aa7379c0125", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97b41cd2-f29d-4a2f-9fa6-4e1dccdaa40c", "relationship_type": "indicates", "source_ref": "indicator--f8771371-bea2-4964-82ff-0fa679b9485c", "target_ref": "vulnerability--a2257583-2ae2-4920-8e5f-444787dcd26d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f09a684-321c-48c7-b8ea-0e9565c6393a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.131.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ad8ac7-78a8-445f-b840-b57a89322304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.201.169']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55f387d-7d1f-45be-9484-704d2682726f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.208.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a9d88a-8df5-4528-b497-88d9ac8a31e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.103']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379d8b1a-2109-47e0-b071-1554661678d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588129e8-9b26-497c-a93e-d1b90efedda9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fd40f6-b5af-441a-a5c3-29838894520b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cc4ce4-a89d-488a-a34b-d077a4cea4ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8685617-f0a9-4067-99e8-8eb507885ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.235']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac5f327-9001-47df-b1e8-eace7b2d2f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d822dac7-4f95-4e14-ae13-a2fda4547b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.72.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acced0e8-53ec-4dca-9677-57d0f15ec27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.74.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7206c4-3859-433c-bf71-b3df41e605b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.99.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346e91f9-f56a-4d29-8cad-f4edc0d2cd16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.46.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7cb599d-bdeb-4e6b-96c6-09a60a9b77b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.46.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598b144c-35ba-4162-9ee2-d76849bed6b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.247.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c190b87-e1d2-4286-b7cc-3241ed03da68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.170.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c00605-af3f-4e9b-bff9-925f54e31f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.195.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34f7301-2884-470f-9064-0336b6a5d6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.219.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc95b330-6aa6-41f1-8b76-82f8168b41b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6908cb6-4ea5-475a-bd38-d36d9c53ecc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.90.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58a26a3-4e9d-4018-8e91-f4b03a6c8261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b464eb-5dd2-4650-9e2e-75a19965a52a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.201.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2cf527-9d96-415e-8278-a4b36bbebcd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.33']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e9eb9a-d0bf-4946-96bf-97183aa57c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86b958b-2ea0-4fc3-817d-6a9c84b5fb0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.200']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfe2fc7-d1da-40c0-a64f-569789505531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.195.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d125ff9-ecfb-4375-a607-682895f2b5b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.151.225.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20126e6f-a31d-415e-ab79-dd5060bec2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.222']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65f5f66-8f66-43f6-9168-9e490034511a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a12afd-c066-4603-9f6d-7e13fee170d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0052282d-20d8-4dda-8988-f3ec74d932de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0bef29c-70f9-4f2c-9be2-eff9a8d741a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31962229-79bc-46e2-9878-a9127a8b7516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d84ab53-5fb9-40be-937e-f153780c0d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.37.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ffa3e0-8140-4cb0-8715-a416f3cee4c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.107.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b757201-3db9-4f2d-90a3-67d079785893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31584751-0dc2-4a2c-a343-27052ead59d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.101']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f856c2f-1570-44db-a982-e7097c76b87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.142']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826ddb27-1976-427f-b693-5be4067ff3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.143']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee72bba-e9f0-4723-b217-e17cca2f5cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.152']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afd82a3-3b8e-49e6-bc9c-480531809347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79780265-e840-4569-9a54-b748cde8bd31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea28b463-5574-47a9-8396-9e9c23cbec95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208152de-8fcf-4948-80e6-b591f19d0dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77988f4e-a18a-4c1a-ac5c-06c5194d8158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ffeee5-3212-43ae-92d6-12e4a62c6ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a1bb7f-299c-4cd4-a956-2902d3ed3a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb0adab-c571-4926-a6f8-a8e1c6c30f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.164']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c46c20-e3ff-42fd-a6bf-6db044963f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4c653f-9709-4e8d-8174-0516db09e6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2e5835-da7a-41b6-9979-0672425770a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cda27ff-5a76-4045-b9f3-c7517cf527e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.62']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580745d0-bca5-4189-85c9-be42a186416b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b511da-7f0f-4067-95b4-e383cb6a5924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.156.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46437c31-e0ef-4016-9d9f-956ef9095d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820f39e9-9544-4c7c-aa70-3dd74b38a5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d37786-98c3-4796-848e-947d105ea86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.154']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66295bf-6740-4a05-bda5-4e5d2410916d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f22e288-06a5-44c2-ad01-30dec2733669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.203.144.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d8c15e-1b69-4426-bc9b-5480441ea9d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.203.183.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a485506d-320a-42c7-ac83-657f089fd499", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.251.63.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674d586e-44a2-42c9-8756-432af0454aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.47.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387f3572-16b1-4e68-83bc-f7b9cee03917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac45c41-12fd-46c0-a6c6-dd7e84454e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.3.129.142']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4621a5-7b6c-4330-b8fe-0957cc598a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.217.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413dc46a-998d-4d56-81dc-a5e9a9575868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a0457a-6e84-4883-b683-d11962751fbb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.19.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e279ae-a7c7-4793-90eb-bea5be3f0e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.95.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91346842-8e02-4dbe-be0a-683f7e84aaf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.251.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad59ae28-b764-4435-9bdc-da56f0cabf4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.47.118.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674e8824-7e44-41f2-ba3f-c0d36df800d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.48.238.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2403fe-008e-44f5-a2c3-9186b77b81af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.244.147']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b40fed-f22f-4d0f-bd97-824ca6548042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.4.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ad5ec1-ba56-4e46-97ef-a9a96af1776a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.84.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c961f64e-f9be-48ab-a385-33cf0610deb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.61.126.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f956eeb-1139-460d-8920-4925227ec74e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.143']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd93d3c0-da3f-4357-bb90-06c37aa4a5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05749d47-e569-40b7-94c1-e98a71468de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36037253-fe72-4554-8680-bebe4c3dfb6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbd3a4c-fd2c-48f4-9c2b-473d78b8d6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bd8f1b-67d0-46f3-9867-c1d955476280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3796becf-1f57-457a-9f70-b01287c9919a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad31c6fd-8663-4f70-8260-9e2266f7a842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.168']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76836ec9-b57e-4e9d-98da-b3dc70f87369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38e6ea7-5538-40ad-9c6c-68b9d86186b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a7d6a0-530c-45e9-8407-613a8f08cf8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb4bb94-b4d0-4224-93ed-8aef5f06f2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef5f1ea-a07a-463c-9c7b-aec482c6eb61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd7e9e5-ac88-45f5-873c-100e00ebd929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218673f4-bf11-43f3-a263-d1cf10a13ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.97.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f66af33-1fe3-4ff8-9a7e-2d8dacf94ad7", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ac9c3e-0da2-449d-be8d-3d34ff1c4be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.145.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9f0c14-e933-435e-975f-f9d58d004767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f129d5b-69c2-4183-bf0d-4ae52e03ab60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19182d28-95f4-4d42-b294-1e39d53038ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.0']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a2982f-2413-4b5c-b439-1119c502d106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e881d129-5787-4ee5-9c01-0492a4d4972a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c4fa49-2f07-4f78-a0c7-eacadcb7f05c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8779aec-37be-47da-90a5-8993cb514054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54350da-f180-4c08-bd82-02893c24bda8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812e6112-24f1-4243-a767-4ae58d70dd2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff0d0b8-a22c-4276-9a99-fb8b05cbf7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1575199-6e60-472b-a9d5-f472c146ba22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fddfaf-c81d-49ef-9468-47115e1c6979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6290681f-3a04-44b9-ab09-0646c7baa23c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.105']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f877d7f-acf4-4218-b695-730180760789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c8be76-38b8-494c-b493-eaa6389852a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca49c31-1a40-4247-98dd-945c7cc4c997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9a21b1-9398-42fb-8da3-b29d5a073389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26de2082-fb47-42da-a1b6-9fb2f7da9f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.160']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8a6936-9ab0-44a9-b5b0-d98f87f20a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9617c09-5590-48d1-be70-afefa3048308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8ad770-3013-4de3-a710-57cfb78f437f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5f1e1f-f91a-4316-a65b-39f71cb3ed46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b71b20f-38e8-462a-a122-eb4a12bbcba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3a2c7f-9c1a-41ea-86cc-c9280ce07276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.108']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c7b708-34a4-493d-8a86-89a0d9a5a8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da8069d-4ac8-4143-b3d7-e5cf8ace8288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac3091e-0ac2-4110-949e-b2fb5577c510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58c7530-8deb-4330-80fe-96e5e16ed157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ccdbc2-ab29-4ccb-a5d6-e6a4b162cba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864ac791-57dc-4f97-8532-9aea32a157eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.60']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1ef793-04b2-43e0-8ce5-22714d15c71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.33']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2a2561-607b-4a4c-a7c8-0f33356d9e13", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.216.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109fb8ca-7532-4894-b81a-09930a806b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb357004-aec6-4442-ab9d-2daafeefd8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fa6968-78ec-4410-9ee8-14f3b9fd97d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af640e62-a450-48f1-8623-663c63108828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf69792-8a51-48e5-9dce-fb85231056b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.47.186']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798a124d-ff6e-4989-b128-1aeb290b15ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.150.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39eb4c0c-e601-4767-98ee-5028f384f707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfe798d-e3f6-434e-af2f-beaede0d96ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a9a741-d8ff-4ab7-8ae0-eb553f31da80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e4fd80-0fc6-4918-9dfa-f910590812c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37fa43b-f05b-480c-a6f1-780883c89350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f65c013-3adf-441a-9992-6122bb5c291b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.62']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e86bd0-f7ee-4515-b19b-95a9f11b5fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.166.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95bde830-ebd4-4bf8-bf36-7aaaf5a422ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.60.216']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5888d00e-0c50-4b0b-bff4-ba595e623076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.140.180']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd27666-9ea8-40ef-86a4-df53306aa694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.225.116.235']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbcf40b-642f-4c5a-a1b6-5ff50c8a097a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.229.8.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eec9898-b2ae-482a-89e1-b22432cc8d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.25.22.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08dd6ad4-21a3-4fa4-be95-28242055a123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.25.62.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129de615-391a-446a-b4b5-9ffc381744da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.114.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a60a96-1291-43ee-bf3d-0d386ca46533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.121.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a3b578-e806-4744-aad8-7ccfa40a8071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.88.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11947729-0e6b-4f23-bba7-38a4a1eeb8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.88.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2b1681-0a26-4b5e-a2ed-69926b219e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.91.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83357ae9-0804-4b74-9a74-6863d93254cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.69.35.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b896a166-aef8-44f6-a289-7d47c2b7841d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.81.189.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c962ea59-da97-4882-93f8-370a43d8c57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.110.155.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e43c23-51bb-478c-999d-bd57533d60f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.158.115.119']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8447630f-aeb5-4f75-8da4-756fbf89c7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.213.231.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b15969-3d3f-4b75-8dfd-5feeea0db2f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.221.108.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2948320-c8a6-41dd-8408-a3a81ac1d51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.239.183.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cfc9f5a-ac4e-45c5-a404-6db813db56ff", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.244.23.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a250271f-2cf2-42ad-937c-41c3fd8a44c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.189.51.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56512b58-fb40-420c-a4df-dde9bd31cf26", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.65.129.186']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b221dec6-aebf-4f20-8d05-e5b5411141c4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.101.186.162']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfcc6e98-b997-4da0-be38-d7f54de2416d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.124.40.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da46b957-b3a9-441e-b2be-7060baaf101a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.156.108.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4ce3ff-be19-41d9-9394-2eda2dca48a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.188.166.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caefcdd9-526e-47ce-8891-9f6a7696b87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce4dd25-72fc-45a2-8c64-e020459109fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.57.235.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afcea182-a2ea-44bf-931e-3481eaf9d663", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.98.64.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2328734-9f99-423e-b1d5-405764fdb416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b1848c-03a7-458b-b6e8-67df91c89e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac886e7-e82a-4566-9eb7-1d62e07eaefd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3868ab75-1f88-41d5-b095-0ab498a573c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edec7ccd-540e-408d-9112-cb04b678293c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78cae1a-3afd-4626-a540-abb2b520e3ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36706133-dc74-4f8d-b0f4-1b9c984dfb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50389059-e31e-4d65-9f49-9ffc8834f5db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2297eedd-2f4e-4691-8355-ea2150f70937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ecdced-fbf3-47df-940e-23427b45c6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8873b0-8b4b-4818-abe3-e757c03491a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1e6a71-1a83-4ef9-a8a4-2c21a6bbec9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.13']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ff05b1-6354-4c8f-a935-de5b8527b2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a58a3fc-ba3d-4b1b-8bc2-eec2557ba81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ed3bbe-812d-44e7-86df-826e0936bc6c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821000f1-29e9-44f7-bc59-2ddb7c19c7b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb52bcaf-9456-4aad-831b-2e4076399f3e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.144']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6498dbff-3848-42a2-bb9a-f7d63d1a0679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490811e1-766e-4029-8285-706b81a44214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3814310-15e6-4173-ac68-824f755e783f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.168']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69d7049-a2d6-4a69-8540-3e25192dfb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.169']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82430cad-e353-4a7c-8095-70add8c209fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dda0d46-7ef9-4b5a-852b-cddc073fb66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e149943a-525a-4405-a78b-0769ffe71c54", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1515d348-ac73-48c1-9a15-0ec9122981fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b536e8-ce12-4488-927a-1d2914afb202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2175995-4330-4f26-80fd-b9fc50d602b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6d37c3-6f7c-4d60-9644-9d9d92d887fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d90bc5b-f824-4041-a6d8-c1bb37c84004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa599c7d-8f64-4b5a-b169-9a62746c17f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5491902-f4aa-4d8b-a0e3-5944b9a23313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c076bb0f-f73a-46c5-8b9e-215f366a2454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962c4fab-6122-46d6-bf37-abbca52b626e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1743b1-19d9-4cbc-9739-13dd9dbd81e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e27a77-a7ec-44e4-ac15-bcb06c9335d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c2c03a-0631-4474-89b3-2a2cbb9aa706", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4373459a-dec8-4d48-9f39-9dff88853045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6eed2cf-2510-4e61-aa22-dc128bef6484", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dac3d54-85a6-4140-ad52-5a66a29c3924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b5bd84-8865-4024-ab4d-2f07a9c92c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe9e9a4-0f90-45cf-b534-f6ff3cfacb79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2966ede-9cd1-4be1-90cf-fce7987fdcd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635b46cc-2584-4136-9743-f057f79d2057", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: digitaloceantoronto, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:openclawglobal", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904889a8-e96d-4cdc-8cf0-eab7ba11a95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4215b0de-31d4-4c03-b859-a12b046c6b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96926fef-25ed-41f6-b690-488ad19fa5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce16607-9fb1-45a7-89f7-dfaa4f500534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d221c30-b342-49a6-882f-6f07c7f578cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f368b0c9-b4e6-4ba3-b28a-83677badf270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051ed638-859a-44f6-a338-9cba1fec237b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4084e932-edec-4964-9f6b-f18cb034d532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad886d6-c0e9-4a8c-ba92-2f8e3231d3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45a6846-b6b5-407e-9372-4384a848a9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.235']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a13ad2-684a-4371-be77-c7b799129f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac4cd77-3d7d-4eff-84d0-07343c722576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b285ba53-2bbb-4d9e-b71b-f47151517b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1afaa3e-86b7-4b59-8c3c-18c835297bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30339aa-c0dd-4460-b88f-82a4bfaf5bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35c4c3e-675c-4a10-8f6d-cde8a5ce9b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edddde6a-4bf7-4f1f-9b00-b11db6af0ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c899822f-5c19-4708-a5e3-5a623c3d2d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bdb32c-f7b0-47b8-bf9e-f46249861907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d758de-8c16-499e-8388-83a3a5b573bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0b7a44-0961-40d3-b126-efe13f7feab0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc15437-180d-433d-be8a-6c46273c4d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.31']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab81b49b-1afa-41d4-9c4b-d8a2d6556683", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc10995-e128-495a-89c4-db7861998ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.33']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f86ea31-f858-4d2f-b28e-1cd718233f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc68eb99-fcbd-42b8-8bb0-ed213a68929e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79caef3c-05cb-4ef0-bdf4-e6fa1322a7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0e675a-3fc6-4f67-9d62-e6883b64a9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e210aea-e40c-4495-9a08-42817edc02bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e0450b-e63a-4d80-bfca-2d12100ca843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fadc397-0e0a-437d-b09c-d44f8bc7d19d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed51f71f-27d1-43fd-9309-921a5dfe3cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca2a9ab-596d-4f01-9b7c-9882aac4b890", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d23470-50e7-4a24-9299-8070aa4ead78", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c60eef9-e20e-4b18-a942-fb92d921186d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1781ce2d-13bf-4e37-adfb-f2119ba70279", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91be5a0b-d340-4213-88e8-bb29a148feba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc5dfc3-216d-4d96-a18a-6e3397dc7533", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: digitaloceantoronto, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:openclawglobal", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ea917e-df94-4a37-8c4a-090d5f101ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b19c1c-54dd-42c1-ab9f-c64ec5a2c099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16a2adf-89f5-4312-b4e9-9a85c58927c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4165bab-cdd9-48b7-91a9-bfc68597a793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0e312a-75b3-410f-9022-c628c296df74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0925604f-8884-4b40-809f-814b7ba9c192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e08f63-13d7-41b2-b1e3-019434885e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baeb67fa-2580-47c2-893e-0c70b73b3160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fcca6a-6553-43b0-aeae-1b4b63d90a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac87f16-cef5-487f-8075-c397f05a44d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ef3a8f-08cf-4d0b-9cfc-ccd4220c9e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1404a0-dfa3-4716-a09b-bff1852db9e4", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e333d4-c905-4704-8248-04fd69bdd84c", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc40ddfd-a45a-46c1-b21e-902cf546a80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a326d2d0-5ab5-42da-9904-402b39344fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0660fd3-a764-4d71-9bd3-7a5d87cfc7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322a559b-1633-4a27-b36a-9410e5e5013a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649c5ef9-1139-4091-8b8a-c76ffb74781e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436d53d7-3fbd-4af6-a23d-da655a1218d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c2b316-c85b-4189-9d20-f141c1cfd155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96589126-3931-48fc-8439-62b227ae43d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965e2edc-a79b-4f7b-b4ef-7baf12692914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe83970-cd2e-48d1-81ca-839b47934e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6dc05cd-1997-4afb-babb-64407f213296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b874cb31-b8bb-4d95-b5f7-45ec2920b8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075b9062-0a6f-48e9-ad71-65172eeb0ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213c1efa-1601-4bcb-b8d0-a2261345085f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f2a9c2-5f9f-422b-ba9e-ad4afe663c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025264b2-4e50-463e-83c3-9919c0aeea18", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.183.111.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f5b268-0dde-497e-9497-3f8fe79b1956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.120.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab4ac31-9789-47d2-a7c4-12cfaecc291d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.220.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4554aa8-c2be-4631-b653-4257193b1d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c84376c-dc1f-480e-9048-8e3fa068b048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.42.21.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4eb622-1efc-4131-b066-91ef06dd5a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.106.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4b1ee6-156e-4071-8513-76cd96ba0364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.201.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0cc160-aa48-473f-9f44-f9aa006e5508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.215.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5604beb-273f-4252-82de-c0c9d947ffcd", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.217.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beed4a86-9194-4d66-ab13-edeaf04c138a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.226.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb476784-35e8-4751-92d2-055138b87e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.57.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30ccf72-7551-49f6-91ef-b95708f278d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.69.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2630ecb9-6649-4743-9079-825e6a5fdf18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.211.170.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c48a67-58b1-4308-a21b-30c737eced96", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.244.224.200']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb157fe-9e66-42a6-98b8-480819dd2412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6366e81d-fdca-4e98-8dc4-be9894806898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10169b64-6035-4288-9918-f26425e5c5cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54a3a3c-82eb-47c2-9dcf-bafe1b1ab46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e423e6-4b64-4157-8a6b-a7c1fe189ace", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7338b44c-ce7c-4109-b702-a45654664728", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c2ffe0-dcec-4760-950f-c4e09c6ddc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5489457-7b58-47c8-be3d-aa8ff83fd542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbdac08-bab3-43b0-80c0-2569838dcc31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff08b96f-6203-4b4b-90a8-bfd5ee722c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045af438-8f1e-403e-8d34-c9c09b007506", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.82.115.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d746cbc-f749-4859-884f-3fb20b7baea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c5e61a-7bcb-4f66-8bc4-116139e52f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d713be5-033e-43c7-9d47-1917fd84bc7b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.150.154.241']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c5f9311-42a5-4538-9bf4-07c290cfe1c6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.205.206.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f348e325-77cf-4a24-807f-9773e0b063b0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.240.111.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbb2df4-3f2d-4dc9-8782-a6d6f44c3cba", "name": "Malicious Host", "description": "Web exploits: exchange-ecp-proxyshell, spring-boot-actuator. CVEs: CVE-2021-26855. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.248.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34e53632-3d56-4954-ac36-63384f2bc352", "relationship_type": "indicates", "source_ref": "indicator--2cbb2df4-3f2d-4dc9-8782-a6d6f44c3cba", "target_ref": "attack-pattern--f2335446-3f27-4b9e-aa8b-89a8cfaf2ec9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16001b6d-f14e-4ff9-8cf8-3de58f964700", "relationship_type": "indicates", "source_ref": "indicator--2cbb2df4-3f2d-4dc9-8782-a6d6f44c3cba", "target_ref": "attack-pattern--ccf3d1d2-e476-4ce7-bcdb-4aa7379c0125", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e543df3b-8ea6-425c-a893-9f387b904866", "relationship_type": "indicates", "source_ref": "indicator--2cbb2df4-3f2d-4dc9-8782-a6d6f44c3cba", "target_ref": "vulnerability--15c116e4-e347-499d-aeb8-c5049d6663ac", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb9e6bf4-cffb-49cd-bf65-eec56285fb03", "relationship_type": "indicates", "source_ref": "indicator--2cbb2df4-3f2d-4dc9-8782-a6d6f44c3cba", "target_ref": "vulnerability--1d2607e4-d6eb-417d-b015-b94ebe505ef7", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3865b00c-8400-4ad5-a070-300a84a8d307", "relationship_type": "indicates", "source_ref": "indicator--2cbb2df4-3f2d-4dc9-8782-a6d6f44c3cba", "target_ref": "vulnerability--a2257583-2ae2-4920-8e5f-444787dcd26d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfe0ac3-32fa-4a64-90bb-b34de7c95b7f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.94.191.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58a45e6-401d-48ea-ac33-efbd6fa13d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.129.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851b0d4d-6f2a-436c-8670-2fb61410938f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.166.183']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f85d7d9-7cae-433e-bfc8-7ae6004f51f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.184.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f48899-3f25-4d3f-b9fd-c32dc6292fab", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30ed398-4def-495e-89af-bc132cb67018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.191.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ca7510-df37-4816-9f45-8e33b875a15c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.183.56.154']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59363da5-dd8d-47aa-b05d-63c063b5717c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.87.93.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc7eda8-966d-4c19-8826-fcf815a41926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.143.37.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e352eab-45df-4f68-b965-8b4818fab5a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.145.38.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fa3f0b-720c-496a-ad84-75a33d160ee9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.227.110.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6562d7-bd15-4e32-a485-48b237494c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab07373-557b-4771-b890-69729471ca10", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.44.250.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7281f024-9b02-4dc9-9303-2ad0a5d93a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.47.126.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896fc94b-bd86-4275-9de0-af3690dc4860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.3.155.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c80442d-9183-417a-9c44-10b5b51bfd0a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.34.135.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ca636c-6ee9-427b-a177-bb0ab2f20bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.47.65.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba3f65a-69a6-4ba7-afcf-fe2d241f5a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.8.242.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4564a7c-f408-4acf-92e3-d0adf210aad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.8.58.101']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f715b87f-7ce1-4c87-acc0-ae19651e1675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.136.68.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4764d2-eda9-4860-bc35-b211cbd8c8c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.136.78.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce62ce9c-3da3-48bb-8a39-5ad6cf35b17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.165.70.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbb366a-3e00-40e2-b52b-19c13a84b63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5909cd30-c885-4a90-9bbf-46a6879f87a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8885b3bb-2997-4582-807d-283f35803505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf91509-8f32-4c05-969d-7cf605517bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0cddb8c-4c1f-42f9-a02c-6d865746660b", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d11bdae-eaf6-4414-9ab4-f38945c8b0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f36112a-ce24-4056-b77b-2538ecc59a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43322fb5-4cdc-409e-a381-9ea17db1fe57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4faada8-76e3-400c-b463-4c0a0f6422ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.221.155.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c293e9c-529c-4225-ab06-921d9c97d651", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.110.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff37da1-af4e-4eb1-9152-295e41fcc3c9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.119.148.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a0ad35-90bb-4956-b989-3ddc19e1ca6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff79277-37c3-44f9-a7c7-5f9bb0b55d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.103']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01943d2-0e1c-424a-bd6e-172cfbe2e935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0c7c13-5db5-42b8-aaed-aaa166b641c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55ab6c2-df58-43dd-8708-6854b572e210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28eaa0dd-82f4-42c0-b95b-7089d434381e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d018cc-bebd-4d8e-9964-163dc18f5d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36802b19-70b6-4540-a218-b2fa0b43990d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113a80cd-1f44-4c39-bab5-a8bdc8bdbabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5e7b58-b1df-424a-8116-d66224c2a3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03833b88-c969-4c71-8ad8-7347b317005f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.126']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7af5a6f-242f-4ddb-86d4-0d18b58909b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50973edc-4c8a-4593-b93d-b76ba84df95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3c6c06-5322-44ea-b159-4da7eef2b454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71088a19-b42a-48ad-a9bb-06c29293fc18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b869e04-34cb-4a8b-b7d7-01a34d281d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1db4d7a-67eb-4de9-a6ed-2bbad92ce162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.80']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85aed9d3-028d-4aed-8b88-16c9cd8bcd9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a0727f-214d-4eed-b8c9-32f69b1f032c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.219.89.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7af08c-f881-4aaa-8fd5-965086d33ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be20ab74-92e5-493f-9604-281c0420dc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596fb6b9-4926-4f10-acc4-203cbdfbeb4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9f29e5-6011-4796-9895-763cf2cb1022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.201.63']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c83b98-a51b-43f8-b188-006aea0b9346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.201.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee512ce-66cb-4fba-bde8-6935e43d4d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.224.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af57754d-d074-4bf5-8321-66342b3eb32e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.224.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d5cae8-f4ce-4b15-ac62-08a2df565156", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.250.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae69546e-dad3-45c2-b6f3-4064bd38b0d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92956414-dd0c-44a9-bb03-e48eff4bab16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c53337-6522-4b22-98c7-4e210a872f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1352984a-07fd-4b44-826e-42c099c9f845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054ea79a-6a5a-46bf-867c-737ef97b82ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7527bfc-0cb6-4ba5-9ffb-bda5f14ee48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5078ba07-b901-4329-98b5-9bd66e6fcc4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a767d18-57cc-4e16-a195-a2fb279dacc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be0e8b4-c427-4b0d-978c-e74f5cbb5f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f5662c-3048-4760-8580-2c534afdb783", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a076d9b-1442-4284-93f9-28499c35189e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ccd3dc6-c6c6-44ef-a11a-2a6783d3618e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46960602-41fe-47fb-b56b-a01419866a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.126']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b9df75-3d91-4ba3-b25c-9594b3beb578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15133499-2b37-485d-8321-2a6132ed2f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789e6eea-c333-4348-ae0a-ef552ee19fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17fda8e-f182-4df1-8db5-4b4b5f986402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4eaf20-e719-4681-87d0-a381d59029d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62076692-dbd5-4970-840c-6c255dac573a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f57e9bd-e651-4c10-bbbe-3a96ed0deb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69a8606-58a2-4440-8ea2-208a88e133fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58755d1-d5e1-41ef-9efa-81d67ff00e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e03e202-aa2f-4f22-a9a0-abad790ffa4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3a9763-62de-4a0c-86df-e4dfba6a1504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4755f0a0-d05d-40d7-8670-963b2e64d188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6593d8-fba7-465e-94be-799eb8407bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.153']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b87ca65-b7e2-43fd-9346-4224bf8b11fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410e77a5-c628-46af-8aba-0ba05fd651fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9b8002-b505-4c24-a081-044e214cac03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da5c2b7-d6ee-447a-9e0e-e24b772c4a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ddf9ba-3bfa-4044-8860-0518fd92baad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f613ec-27c2-422b-b680-ff9ebfc599b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3217dfbf-7b64-4f40-99dc-d8713cd3271a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b81c6a2-2e18-455b-8079-15e92219ad7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a8d3b7-0186-4a13-afe8-391cd22184a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d289fa7f-7d2d-4956-a45b-479ef2ccca9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6404ef27-881f-4879-8ecd-90fd5e04aebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888d4678-6c48-4535-8753-ecbf2ebb7bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd27844-0e20-4818-91b7-21cb8fe447ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d845cd-a198-4ba1-a0dc-b88d7c09fef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f04847a-583b-4f5c-a9cc-8082e2c72070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77021b2b-1498-4a7e-aef3-b5c2f63fccf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201d012e-85ab-4e23-8009-e5aa2e0fd0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887957df-118e-4b44-986f-a0033e068d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363642c8-f722-44a1-a813-1f9f4582565b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2a48e5-2af8-4d9a-94da-b7d5ff63dd8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d92ac9-22df-49ad-a461-956f1741fd3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2634c96e-18c7-4f9c-95b3-6b10d9ad2441", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.250.251.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d8c60c-66bc-4717-a9f7-d8467d5469d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7d40a1-a572-4fe8-93e2-1f0508dde634", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.81.248.174']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7015038d-0443-4811-b235-05d5a0cd0222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25f1cc8-a46c-4594-8845-5b429a4abbf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.101']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe1c656-72b4-4324-be1b-1ec054a6f58b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.103']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df90ac54-f6d0-45a9-b293-4e09ec9fc70b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1169ab32-e7bf-4d84-8a47-9bccb7fcf88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf88eb1b-febf-4c8b-a3c4-7da69ae1f6f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bd60ac-65fc-4c2d-a292-d954705eafd1", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.165.56.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0309ec1-5d5f-439e-a91f-e13d299c8516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.25.82.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd77194-8f0c-4205-8541-100d6ca57c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763a0557-d067-40bd-a042-d1602f3a045c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9906b623-6c48-4c02-89ec-dc4d98b17981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.77.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bc4211-09cf-4302-a36b-9df90242cbb4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.77.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa544c78-f922-4c2c-bfef-178aaf2ff7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.10.102.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adebfdb2-43ce-40ac-b436-d7536957cba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.147.106.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0d98e1-8030-4f07-b576-acc985dd5a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.71.245.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318e29c5-e6d6-428c-87aa-e42cfb11a537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.74.227.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b390e890-6cef-447d-8271-4c6dc9d6b3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.132.197.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3617a785-0450-41b4-8ab6-cf33bba01cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.134.57.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409276b3-c507-40b8-a7be-e1fa451eee52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.135.36.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de33a9d-8a58-40f6-8719-ea2d65084457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.135.89.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5891ee22-325d-44b7-8b07-aaaf1a10e7c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.233.126']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a864780a-c0ad-4660-b23d-e39e9d2ce52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.1.163']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0ac000-afe2-4de6-a07d-4720760bfee6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa281dc-b69b-4d69-b3d5-6f353b775b78", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.90']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1548a2d6-4766-43a5-8b51-cf69bb3a1532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66945ddd-cb3b-4951-9091-ec7b0c610bdf", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.73.136.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176365fd-9856-49b4-a64f-ceea9f9cced7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.81.40.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572164a4-7385-45c8-8965-216064a93072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.0.15.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4c6af9-40aa-47d4-9369-46f341385dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.11.4.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09120614-8b41-4984-bfc9-35afaac04ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.126.238.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30565f69-8c3a-436f-8b57-4b23c50bbbbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.130.29.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93f44f8-7f51-4ec2-8ac0-978ccc654f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.131.139.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfbd400-264b-42c1-adbd-7fd3a3a8af1c", "name": "Malicious Host", "description": "Web exploits: openwrt-luci-rce. CVEs: CVE-2023-1389. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '221.159.119.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef0cd424-1e99-4c3a-957e-7ef0607afb82", "relationship_type": "indicates", "source_ref": "indicator--adfbd400-264b-42c1-adbd-7fd3a3a8af1c", "target_ref": "attack-pattern--f2335446-3f27-4b9e-aa8b-89a8cfaf2ec9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ceac51e3-5c72-4d06-a712-0d729ba84e93", "relationship_type": "indicates", "source_ref": "indicator--adfbd400-264b-42c1-adbd-7fd3a3a8af1c", "target_ref": "vulnerability--68115e2a-3a12-4f80-b6b0-bc97e211ee1b", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a3058e-37a8-4171-a608-79d6c85e617e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.162.135.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d6931c-ea4a-440b-8f36-89b9259bdffd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.168.33.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ff0d48-c976-4a86-b239-3bf400fca66c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.180.47.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf9e049-57ad-4cab-b548-340e656d4647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.194.214.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ca6867-7b9f-4019-ad9f-84cecf5c0682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.214.252.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b390ba-a700-42af-9e3a-dc7f2dacafb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.233.3.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b7473e-94b2-4862-8aca-0e109c8241ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.233.53.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1a6a40-232d-4a9e-ae24-d5b7775c7e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.127.16.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82ccd75-c903-4a7e-9435-0c83b368d52f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.141.132.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b0f4340-3f91-4bf7-8c92-bba15140f546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.200.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cef5057-53ee-49a9-991b-ab169c68c97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.219.154.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3368e7a-3a0b-4dee-9d87-a4d845aea1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.229.242.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56918c3b-c5c8-455e-9e91-7c41732b80b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.97.112.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998c13a0-d9ee-41bd-bc7d-af269373d3fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.109.252.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdcd1050-94c7-40ca-8f6f-ed7b4db0e202", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.109.252.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d94fb7-487a-4205-adbb-a3ee8269c07e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.124.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb64e1f8-f3f1-4283-911c-2a83f443958e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.16.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842a5d0c-4300-442b-9115-47a9fc0d7f9b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.73.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4918d8bf-73be-41e7-a24c-db5d85625165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.19.204.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376c2287-72f0-4683-96b5-6532ac93aeb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.166.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45fddb7-28df-43c9-9ff4-036bf6c2372f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.167.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b675fd-ec4c-4c9e-81d1-f3b90b1b023d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.78.210.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcd72db-009c-4d1d-83d2-7709af8806cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.91.110.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a03f7c-73a6-4a7f-9f19-fc64ad99ded6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b22f18-8e3c-4cfd-ae17-52329a60bd60", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.229.7.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bfb412-a9af-4044-92f8-8a282f39ce9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.47.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64541f36-5eab-4b68-a348-654b8d78814f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2863a7f3-a674-496b-8ab5-b8717e10e7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46ccc1b-2411-4f48-8852-eb6ebaa4d2c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388f9118-0aa2-452f-a4d9-df2e011639c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652fd6da-1828-40d1-9e4d-a2b2e65101ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bedfd431-f8a0-4177-aa8b-52841f2ed44d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.254.158.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0735933d-79b1-4423-9ed0-4d747486d1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720c8d82-db5a-48b5-979f-8790ab93b76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.20.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1748560-64d0-47d0-8ce8-197fb9c01d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe6568e-0f18-4827-b2d1-c054c7fcc10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99bce1d9-c9af-42a5-b7b5-149b82a875cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094a7902-5491-4a59-864d-fbe0c5f8d67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ca51bc-67cc-48fb-b55e-f9bbb2bd6a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bfb71a-58c8-4dbf-a4b6-da0872c65757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa232b76-60d4-469c-8264-e71ae215c7f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61afc7b0-b8b3-447c-bde0-1314131135d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863ea186-3100-4acd-8ebf-a6e5a2ba7e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d904cf-e57a-4de8-97fe-84523ade8456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.184.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02bb174-b824-4e34-9ebd-da66a134ad95", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '2407:cdc0:d002:0:188:253:121:93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db515c72-458d-41cc-b728-41657fedb5c0", "relationship_type": "indicates", "source_ref": "indicator--e02bb174-b824-4e34-9ebd-da66a134ad95", "target_ref": "attack-pattern--2099f92e-22d5-4f56-830c-a0f433029f77", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dbc4425-b716-49cc-a6d2-0f6797a410ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.10.16.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c70d6be-0f83-4959-82ce-e06894c37d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.110.164.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58dd6b7-51c3-450f-8661-73fdba897897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.118.25.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5117c58-1427-4c95-9796-65a55dd3a7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.18.239.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75c8c20-2a5f-4a39-b0f5-ff0883bfebe9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.184.158.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928422eb-29e8-4606-ac3e-e2ed24157f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.19.144.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed42b2e7-15c8-489a-b9b8-091897d4fd81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.19.155.144']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad449eb-b8aa-498d-9a38-893e86528ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.19.5.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2125cdd3-b427-40e5-afcf-d77e1a74d4a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.192.129.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c70521-c34e-4131-8e09-3ff9166f9971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.192.24.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88401014-cdf4-43db-a260-c58f0b568a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.194.97.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2386a6-b099-4e82-99f0-efc29c01a3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.196.129.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb93e7fe-2f39-426b-b666-c02b6a8f6da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.196.170.144']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127117a7-4ec4-4b76-befa-afe2daa871b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.199.254.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6f1ed8-9966-4461-840d-b5326df4ec2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.200.23.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc85d9f-756c-4b1e-8520-6a70a480fb21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.201.211.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261ff9fd-e19b-43db-ad50-f866cb80723a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.206.244.186']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b234bff1-4cf2-47eb-bd9f-a130b4ecca44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.216.122.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1e72a2-3b3a-43ce-8843-0819dafcb6f3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.221.13.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc795e3-0912-4410-b45c-b3206227ce70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.31.111.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8bd557-b86c-4b81-9204-42842538968b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.72.248.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c535a69a-7722-468c-916e-ef9c70d2e495", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.6.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d668040-1b09-4797-8f19-4e890aefb5fe", "name": "Malicious Host", "description": "Web exploits: php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '3.101.43.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48ddfe71-0403-4225-aded-7de0a1225218", "relationship_type": "indicates", "source_ref": "indicator--1d668040-1b09-4797-8f19-4e890aefb5fe", "target_ref": "attack-pattern--711771cf-7c5e-4400-8a3f-98333c379d2b", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--215ab1ac-9fcc-45d9-958a-ddcbc64da7d6", "relationship_type": "indicates", "source_ref": "indicator--1d668040-1b09-4797-8f19-4e890aefb5fe", "target_ref": "vulnerability--c81e14e0-c6e8-4463-9ffb-b98b2c6a5160", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb6292c5-a36b-4361-8520-8fd5ec8c20ae", "relationship_type": "indicates", "source_ref": "indicator--1d668040-1b09-4797-8f19-4e890aefb5fe", "target_ref": "vulnerability--ae9173a6-de5f-480e-9c65-11bbd60b77ad", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37f2117d-5e19-4357-a495-1ea4929cfde9", "relationship_type": "indicates", "source_ref": "indicator--1d668040-1b09-4797-8f19-4e890aefb5fe", "target_ref": "vulnerability--6438735d-4dc9-465f-aa37-42f44bbddec8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0d5a3a-0f3a-4030-88b4-c444cae7d634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.129.187.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08c697f-23e8-4a75-9c3e-a5d964f9cea0", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.130.168.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389d1aed-01dc-44c4-99a0-96e9a6f6e021", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.220.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040a7ec8-4910-4f9b-b91e-e1c05fa7d632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e6e465-b9ac-45fd-a17d-84542c060134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7538d4-ca4f-44a8-8e05-0c34e0a48514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.147.122.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0af194e-8518-4cc3-a564-9e597e91a1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.77.24.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88599aa2-70a1-4de5-969c-ca6fd72cf6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef1a702-5b1d-42c8-bce8-966be9fb67d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.210.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a25472-7d68-4f9f-8411-e131fbe1c541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.231.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5719407b-4fe0-4442-8e03-6e13866f13e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.95.56.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ff54c9-a6fb-4a52-9672-1ae51b46f9ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.131.68.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c041999a-29a0-4b51-bad3-8ec7db9b9440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.132.90.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d7babf-411e-47a2-b437-1762d9598adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3885bf4b-6048-40b5-ba09-df395ff819db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dab1284-8470-4b93-b6c4-983e5c87b205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a40978-2df9-4daa-a6d7-15e26e768c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.60']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793ec5bf-1be5-4a6d-abe0-230f2aab87a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f264e4-c514-4c9f-a4e8-ff83863b0084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465bf3c5-bac1-4154-b761-fc66031dbf0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193e09c3-ee6f-4f29-b785-035f46374021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f645c76e-e353-45fa-990d-3856ce8621f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f30b803-82e4-44ea-9b96-ddc96ffaa649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.148.168.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093bfc9f-6ff1-496b-b81c-d737a696a712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.162.185.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48516f06-678d-4d0b-8ef3-7c28bef13988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.220.3.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4026fd1-53e5-44ea-ae7d-37a44d9a85d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.220.73.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3679c294-2443-4f11-b3d6-55ac5dad9f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.235.235']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ddc91e-cd80-4473-9e20-b6c7d6076868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.235.62']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c130ea-e654-4c20-8c34-50c704329447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.235.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a0f8a2-3982-473f-beee-2e637388a86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.236.108']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de46071-6cc5-4660-8018-26dc89c71001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.237.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbb1a15-abe2-42a4-ba3b-fa7b4ef6424b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.237.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be7c5f5-590a-472b-bed9-e81621563c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.239.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf8e9ee-14fa-42d2-817c-3e72c92bc243", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.43.238.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c7f880-fe26-4e56-bd3d-be47fb3f82c6", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.43.245.108']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da07aee-22c8-4c1f-8f30-73f22038bd85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.24.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3b45a8-1b72-4a59-8789-42d7db3a9cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.105']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72600b40-83bf-478c-9842-47d9870bcf7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bb9be4-8544-417f-9cf4-131ffb45d824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ccd1ea-6cb2-4a25-bd92-41f097206d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f02c294-66b4-4b57-b409-032d9c1978ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.184.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688a4b60-b33f-45b0-a234-163191e0a6ba", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.236.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34152062-a6ba-4536-a54a-770af15a5b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.91.205']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473fc3cd-761e-4fc7-ba56-b24905da2679", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.80.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25584c28-8d94-40a4-945c-7301be8ebf84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.76.113.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db703b3-1325-4f4d-973c-caaee6068685", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.76.28.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d36c892-e215-4b15-9e01-8adb12fd9c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.199.173.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30362728-985c-4b1f-b860-7fc7e8d41a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.101.126.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17e8eac-e2ed-496d-8020-d17114b8d34d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.129.7.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696bd9ca-4b9b-4509-a01d-1dc0a0316e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.11.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b58a0f-12e6-4488-b376-33480e376200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.131.108.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9871f586-67e3-4fc9-96bf-3cb4e92b8766", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.94.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0145af0e-40c9-42fe-81bb-740b61ab3787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.96.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46a15cb-c978-4902-89ad-835de4f6a387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.156.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af768e9-00e1-4a5f-be75-2ac9aa528dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.158.150']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e4a3c9-3b0c-41ae-9576-0121c020813b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.168.150']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6282ee32-6721-4a2b-a97e-404449096cac", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.226.162']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6216ec-7552-4525-aa02-03ee7f2ffe77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.180.119.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16298568-d666-43bf-8d1c-a6ed8513a6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.185.254.241']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af80a7d4-6132-4e91-950f-8f4cba1c2390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5f2d9a-7c1f-40eb-9680-3d2387e53dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.204.52.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94213e3a-9d1d-442e-af92-1f5352df75c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.204.53.150']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46680866-b0d3-49e6-ac59-4672f87e8f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.207.109.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061cdcd2-291a-4f72-8c37-4461f0df73e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.170.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90790198-a214-4fb3-81b1-a08e2989c55c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.221.211.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87d1597-82e8-4f04-adf0-fdc2b41034d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.222.197.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbd6e43-0f22-454e-b395-7c3210593137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e641757c-be28-45bc-9aa5-32ab3717cfaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.63.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1ec62e-2c57-4d81-b55c-ef85082c8792", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.26.255.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc2125ee-3e43-4529-a1bf-29eaa4f92e8e", "relationship_type": "indicates", "source_ref": "indicator--3b1ec62e-2c57-4d81-b55c-ef85082c8792", "target_ref": "attack-pattern--2099f92e-22d5-4f56-830c-a0f433029f77", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3c20ba8-02f0-4035-9125-16daa5d47087", "relationship_type": "indicates", "source_ref": "indicator--3b1ec62e-2c57-4d81-b55c-ef85082c8792", "target_ref": "attack-pattern--711771cf-7c5e-4400-8a3f-98333c379d2b", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64979c75-b3d5-4640-84de-9f4f619c1a86", "relationship_type": "indicates", "source_ref": "indicator--3b1ec62e-2c57-4d81-b55c-ef85082c8792", "target_ref": "attack-pattern--ccf3d1d2-e476-4ce7-bcdb-4aa7379c0125", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbf731c5-8859-4051-8809-1bf54dd9525c", "relationship_type": "indicates", "source_ref": "indicator--3b1ec62e-2c57-4d81-b55c-ef85082c8792", "target_ref": "vulnerability--c81e14e0-c6e8-4463-9ffb-b98b2c6a5160", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f30431c-34b2-472e-b34e-65376d592ae1", "relationship_type": "indicates", "source_ref": "indicator--3b1ec62e-2c57-4d81-b55c-ef85082c8792", "target_ref": "vulnerability--a2257583-2ae2-4920-8e5f-444787dcd26d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db8518a-1507-4771-a9c9-7db83fd1f12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.27.94.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e253c507-200c-4958-8c79-a47074b7b9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.160.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f35066-4374-48f2-91d5-c8aa8f95cd27", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.171.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccda52fe-5817-45b6-b935-0ac3dde09757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.138.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465d5b28-2938-4bbc-bd70-ac6734aa5276", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.171.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f7473d-5f11-4220-9a62-2f597dfbc474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.211.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5eb0a6-53c9-4473-bd55-8fae74eaf421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.225.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f554a6-0b12-43bf-baa2-f2f29e027655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.7.97.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19bf143e-dd7b-49fd-9654-05d7184e0a32", "name": "Malicious Host", "description": "Web exploits: aws-credentials, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.75.244.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f77f60c-1f30-4ca0-bd31-aac43f57613c", "relationship_type": "indicates", "source_ref": "indicator--19bf143e-dd7b-49fd-9654-05d7184e0a32", "target_ref": "attack-pattern--2099f92e-22d5-4f56-830c-a0f433029f77", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbbf7921-7a37-490d-9538-507d8a68f2d1", "relationship_type": "indicates", "source_ref": "indicator--19bf143e-dd7b-49fd-9654-05d7184e0a32", "target_ref": "attack-pattern--ccf3d1d2-e476-4ce7-bcdb-4aa7379c0125", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c46130f3-5571-4828-96c8-f02c4ff267bf", "relationship_type": "indicates", "source_ref": "indicator--19bf143e-dd7b-49fd-9654-05d7184e0a32", "target_ref": "vulnerability--c81e14e0-c6e8-4463-9ffb-b98b2c6a5160", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5bdd13e6-e6f3-4c7d-b2d1-326856c65de0", "relationship_type": "indicates", "source_ref": "indicator--19bf143e-dd7b-49fd-9654-05d7184e0a32", "target_ref": "vulnerability--a2257583-2ae2-4920-8e5f-444787dcd26d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41e3958-a8b8-4220-8ebe-cd73a16c3162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.198.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39c4209-ca18-4f62-b99e-b4cee5a31535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.17.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a99ab6a-5bef-452e-abe3-d7bb7570fe63", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.18.156']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6068d534-1a5c-4890-9440-a10f8be1566d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.35.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d63e12-9a80-472d-9aa0-76863089f664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.89.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2aac27-5209-4c4e-82e3-1c7826b826e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.126.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a36902-e4a5-4754-afbf-7775408256d2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.175.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e9979c-ec42-4d75-8130-06feeeb6cb3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.224.13']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50066d47-a8a8-47b2-b63e-e9d77e4dc93a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.63.163']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a60eba2-5f8e-4b4c-a2ad-cdd37191d58e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.66.103']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05dcadf-4696-4f96-bcd9-cbf4f6eaf6aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.82.218.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14fc698-cd1c-4b1f-9aa3-6fb1c355044c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.80.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80cf8a6b-07d3-4fd6-9072-ec5ee4e97059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd920c4-34e9-4a00-8b99-80568678afb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.167.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3d5393-425c-422b-89ab-53208be8f160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.18.158']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5409e8e6-7dc3-4ba8-abbe-013b522346ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.187.156']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a58685-67db-436e-9600-c3923b836b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.95.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0812403b-403b-4ee1-9ddb-5757c16ed2b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.194.222.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f903780-b9f5-455f-858e-e060f5a59f01", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.184.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d45de8-ec4b-490e-8768-5d067ff33cd0", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.249.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99fa354f-bfca-4641-a2c1-3c98e2e2a9a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.196.33.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0bab9a-a4b3-4f7b-9515-8a0df9e1b251", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.196.69.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0521d9-74f9-42b4-b507-2688315cc883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.197.173.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75cd8966-1195-4425-bced-92e7de9ef6db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.202.9.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafcf287-5b20-4742-885f-e8dc85f896bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6d0ef4-087a-40ac-90b9-6f84da368527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.101']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd7036f-4177-48ed-9f4a-8be990b6abb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce591350-38d6-4bd9-9309-f6e6f4d8490c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.108']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba658488-afb1-47e5-853a-a36671d6a004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d845a49-3996-4b23-bf93-c0f5d12b4556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dda94e7-c57f-4cf9-8d4a-dd68d6524be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850d9f2e-c4f7-4549-b395-ffa1db8a3260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.119']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821117b3-51ab-4eb7-98d8-920f1c9ed24b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae3f0cd-cc38-48e0-8a96-1b047ebe074e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d9432d-340b-4940-b68e-12b4d0a77804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.13']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d01c397-bce4-4f6b-b278-5a5d65f983d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426e6d45-33d4-475e-9f6a-459de2363bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466c132e-7953-4609-beaf-36a3e50f9ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620f99c1-b9f3-4e0d-a1dd-94290a97db73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf5d562-8682-4fb7-a673-eb7abeed7604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.142']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa28fc0-1f10-427d-a5df-7dd0a7a27768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.143']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05294dc9-ee82-4c35-b97d-de21669191af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.144']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92116e53-343b-4ba9-8e1f-7ed84d92c4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a73704f-2138-49d4-b373-9cd18ee67b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46722572-947c-4230-b155-1c0657c4bde9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36171284-1733-4107-82fc-160c86ffcb55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.150']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba3fc7f-10d4-4f17-98ee-f0079c65c9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c29cd8-5e99-4a77-80b9-91c037509d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.154']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0b7ab0-3182-4a14-9885-e76c592517fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c3fd7e-b450-4210-b24a-76c98e6f1d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.156']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e83de8f-2734-41a9-89ee-e389a533635c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.158']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be6e9b6-1757-4f44-93ce-72c9f934cd92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37cef79-4a12-439f-9aae-3262f40bf1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c45903-4190-4bef-a1d7-4bc795946a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.160']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee157f07-39d5-4697-a2c0-80090153675f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.161']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046c98f6-b722-4b36-a241-09698c442c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.162']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5bb1ab4-4de8-48aa-88ff-e2a2d9314998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.164']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18779a7-1d33-4331-a7dc-c7a87bb60040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8151c2c9-3663-42ad-9041-abed9da31083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6991dab-4e4b-4ef9-85b9-5e83107be93f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49db3970-164d-4760-99e2-35bbaf5da76a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.180']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fcac9a-8d82-4cb9-80cc-8542b27a1e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317ba51a-b770-4f10-9cc6-91db82a1d6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8e7abe-d8d5-40e5-bff9-3379f32ecbf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc318c47-e5e2-4c99-afaf-6e301ab6d932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f475cb2e-dc4b-4079-84f5-b558ea2d53dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521b5665-86ab-4be1-8b3a-597508288a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ca6448-e853-4649-90b1-4c30f029a6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.200']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f009229d-756e-4f49-a1e4-dbf34e490493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefbd28d-a58d-4e0c-bdad-3300cf5eab5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27df2c18-3af7-4c1b-9b7b-1f5bdbfd7d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f407413-ee5b-4671-9def-9ae1a8211f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49795156-bbbb-436b-98a0-5e1ffe0d2541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d8b260-fbd5-444d-8d2c-0e5f55c8e712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd5a726-8544-4ea9-ae6f-06e5ead55e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.216']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1dbb57-abb7-4cf8-91e3-49ebeb077ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a1c034-0863-4ef1-a64a-aa6076b9438f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c587945-823e-4d67-9491-3282d462e6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.222']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5509dc-81d8-49bb-9b80-4fa452159a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c40f0ca-7aee-4e08-a146-d3f0cf5ae801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95cd93c6-4e51-40fe-93c5-dd0ee1586b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eecb054f-cbcf-4879-bc88-ed00bd65ea6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbaf16b-7832-487c-a5d3-c4f5431215a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6595597e-0df1-49d0-8bb7-4fabc6d68290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.229']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fafa4773-cc61-4566-921f-285430982f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eebe5ee-f642-4530-a2bf-9f75700d8154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b043f9-8452-47bd-ac26-5891589e2bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1a71cf-84c8-42f3-8210-6dcfd6409193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28522a1c-9b00-4b84-9bea-71ad78a616fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64971fbb-0e66-4027-8b35-c7a55267f16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1d57e0-507c-470b-a9aa-37f0b5d2c026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920c6397-f715-469a-b16c-6a844bb1bf8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce80dac-d690-4c22-979f-17d4fe285260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a045a565-b8a4-44db-9fe6-bd0d8df4cd6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce31b161-c229-4d4f-9c93-4633b6f34926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07741739-2e17-4eee-94ab-34ba647e5b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a450aa5c-42c6-4159-b7fe-d546ed2f7c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.35']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6da2d29-4ab6-4e1e-9e2b-64adb9737630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4c1620-9a37-4f9b-8020-817fcd6f70c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f32df8e-17fe-4526-b8b1-02ff4238e2e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.4']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7089b4-3099-4eaf-9368-297dc3b24e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06219064-5737-472b-b772-c9fb32f3c28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ffddaee-fdf6-4cdc-9ffc-e440cc9926ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a15c8df-c6a9-44de-83a5-ffdec7a12aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5f8055-86b3-4fc7-a12a-ad14f0ce1cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51492423-d062-4bcd-8ecc-c346a3fc5efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0eeaa7-84b2-449f-8491-bf4187ef75a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72dbdeb2-bd4d-40c4-8189-245f953cb2dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1f1ad8-52b3-4200-b9e1-8764694171a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef17259-f47c-4398-84f9-aabb4979fd5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8400a626-4494-438a-b8f9-01eff7dac44e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675ebc54-904f-4793-948b-a5011e48f916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505c5c5c-3bcb-4edf-a6a6-1851a7e4817d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9762f1bc-3d6c-49c3-8fb5-24b855639c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f4c477-ccb8-494d-b24b-06ef5d4a4b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a9e10a-6cb6-4723-b541-4a36ee26812e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031fbe91-a0ca-4654-8cab-69d72dc42854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d2a506-52e3-4c7d-925b-570c449963c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5593255-dc16-43c8-aa2c-165b4cf4bd53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.80']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2e11c2-ac3b-4969-8e90-a83105a18efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.81']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6500f428-6baa-41b9-8c58-5fda37603189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071c3dd1-c1be-4f6b-a315-c23ab071c0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac41293-9a8a-41fd-8ba4-519b2d57ab90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfa80cf-1f57-463e-84ee-7db1c54afc5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58433316-def5-4f8b-a3bc-af9eb8ca5678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58517797-818b-412a-8cce-28b3c256c2e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d45905f-e069-4f08-a5df-bef7e8d40d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad21c94d-a672-4d76-af3d-9e8719adfaac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16d968c-7866-4065-819d-f7bac0734180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79966682-8f55-4c23-93b3-85fc614cec97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9768be44-c382-4829-abb9-c52b484c37d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.101']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34eeb374-16d9-4b97-885c-6105c9c87762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d530bc3b-2bb4-4797-9cd3-efeb668bd9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.103']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27a5c04-a66b-4255-9d82-efb7aeeba272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1548dc27-14d0-4824-bb57-af139facc745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989109b9-e491-4984-8b39-0626cce7cfbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44b10e3-48c1-4a23-84c9-acc789688da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b845b5-897f-48b1-89ef-6694d815a837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e7f5b0-7c4f-450e-9404-c98edc804a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3e54da-91c0-4f12-925e-ba7d480f9e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.119']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4468c9-b39f-4bb3-b5e4-12f2965b8bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10518ab7-d6b5-4152-ab6e-7a23705b054e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd46c2e-6971-417e-a414-a2a7b269a425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876c854b-3fb3-4513-80b9-4326ba51cd4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016e6976-ad8c-455b-8357-a6abc02389f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c781d41f-d1cc-4e3c-b672-7141ba7a796a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35dc4e64-0f60-42bf-b107-ae4c6147295b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62af15b-cfff-4209-87f6-fc98b3730a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfd6365-c582-4c08-8a53-bc64dc7b708c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c475386-4e2b-45a9-95bb-5a7402bb7a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26632dc3-c117-4471-af24-3b2fcf0d4bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01c3cf0-21a2-445b-983a-84fa38cff2d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.143']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55640682-0040-4ca6-bd0a-0b12dee60566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8c3de8-add4-4736-bbdc-9130238bca69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.147']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3a7455-bbb2-43fb-ae4d-ef372f9b27b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2fe9290-cbfa-433d-84b9-b1b99420196a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03a1aa4-54e4-4899-8498-be3d86bebe9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c324e0cc-1863-4d37-bfa1-82e5af98e7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.150']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e50f503-6069-4785-a8e7-f5d80a4ad256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.154']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4acd7b-035c-4e52-8616-dd8b1bf22f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.162']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17dd748-c604-4821-88cc-5802c2226dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3095baff-52ab-4105-808a-dfb121b7ee31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d2cc98-a2c8-4591-aa91-b33623ea1931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.168']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3500c518-1cd0-4d4c-a6e2-98c406b6b957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a8d641-4b83-4404-953e-5318b8c87427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b019104-c0ca-478c-8fcf-01a0177b3970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c532be-b107-4c99-ab62-a24a276de39b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ca5d50-87ff-4e8c-93a0-5f39d66ede7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.176']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b2d870-e456-4e6f-9434-85262ee665be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fbebad-509f-43a1-af8f-992aa74ba637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36fcfeb2-bcc3-4759-b28d-82afd6095eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d48887-01f2-4a1e-b6a8-f68c0131c5ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9825c5eb-50f2-4415-a835-33a60fb25dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a63e1b-f46c-4289-a627-4a18ab0ba109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8037666-7b6a-45b5-a2c3-71e04167255a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e1d0c2-ccfb-45ce-bc7c-a09942f809c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5711b6d-be64-46e3-8c39-dbb5da82f8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--359706db-9fd9-4300-ac7f-fbe864edf695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506d2636-9958-4d56-b0c2-35c37641f8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb60205c-b856-475f-9ab6-642fb35f337d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab4436e-02ec-4c22-b18e-9deab81d2f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e109b117-e4c0-40cd-9e29-00d0c07ddf12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52aedb60-dd27-40a5-b393-7ec730e47077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1f2b18-d492-43ba-b35d-4ba2aa831708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8144e885-5be0-47cb-ae44-57113ada3d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.216']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f941d1c-9b9d-4572-ad13-bd6be75118f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b122dd2-e9d4-49db-921f-a67637b09653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7d6e99-365c-42ef-8c59-0c2ee95a4604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8d7e70-8d89-4b61-9f11-153f49535383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894ae91b-4522-4cfc-b517-395e6bab5bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.222']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f13be84-166e-4583-8329-a920b4bde1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0631ab-8c84-49d8-85da-281b5ddd36d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d30fb4-0032-481a-88e7-c1fb6e1e9e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d51c0cf1-34df-4f47-a54b-9e3c12983455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771b4c59-459b-4d95-a079-ec20fe2f878b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6fef60-4009-4a93-bc2c-849a0c4d1255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add7e7cb-19e2-4e91-86ea-e32054446c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c98dde1-becd-4ba9-b333-58ae40f40be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3e8331-7bda-4c72-86c6-547b9d4656a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509f96c5-4c85-47da-9440-5b94b1b3649b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27a3bc0-deda-40c8-b592-6b63e7aedfca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544d975a-2876-4373-a11a-4b5b996a5419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7b4b02-e27d-4927-9a36-b74ccb6cf23d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958f2ea8-d9b0-4055-bb02-d95488fcfb01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02044a2-71d0-4469-b0eb-c48bd235e08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1c428f-69b4-47e1-84e7-e58d9d0e474e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3ae095-86b4-4c5e-9c9d-6528f0976e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9c5fe8-381a-431a-b38e-d2366f8af3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a33406f-d22b-4c50-bd5e-a56b35a22c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c123e26-7214-4488-a58f-a6c5ef067a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59ca5a2-d10b-4389-b881-03b0f1230785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.35']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac177629-4d6b-424d-b50a-c81f932c2b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f5b3a4-49a5-43b1-a2e0-753923f41627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.4']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bfcb916-fc2c-44e9-97af-a07295b99aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30184d6c-9735-4bfc-9331-a0af8b36b257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde24ca5-8acf-43bc-8213-d5ac898361ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6dbeb34-1359-48ff-b01d-5611d6f77dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de173840-cb48-4207-8e87-3333b72afa5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5cbc607-3907-4295-a7b7-bb300e44b944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0d2f73-518d-41fb-9c03-1f5b33bc9cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5b348e-6c91-4032-904d-8a4f956bd097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63acf74e-cbdd-4926-b4ef-d257494e6dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d824d9b-9a58-46be-ab25-608fcf82e086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe5bb67-133f-459c-8682-18b91f933123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338ad3c2-153b-479f-b762-d13ecd009d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337fc8f0-203f-4a8f-90ef-ada00bfc7ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad2265d-65d0-43f9-9bce-ecc5c4bed1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f88c281-dd15-42a2-a35d-5d1de1d50069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82320ba-c9f8-413f-8ceb-1506f44dfc50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9a3f7c-048f-4595-8e6d-f2fd7c0d07a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babcfa4a-a968-4612-b269-c49cd8839a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff66e167-dbd9-42a0-aa42-d65736417b51", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149, CVE-2019-5418. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '35.204.220.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d78a749-072a-43ab-a35f-98b954971f3e", "relationship_type": "indicates", "source_ref": "indicator--ff66e167-dbd9-42a0-aa42-d65736417b51", "target_ref": "attack-pattern--2099f92e-22d5-4f56-830c-a0f433029f77", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36ab147f-9594-413a-afc4-803a14f23577", "relationship_type": "indicates", "source_ref": "indicator--ff66e167-dbd9-42a0-aa42-d65736417b51", "target_ref": "attack-pattern--711771cf-7c5e-4400-8a3f-98333c379d2b", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00bfe29c-a7db-415f-95ff-c5b7404ba2b2", "relationship_type": "indicates", "source_ref": "indicator--ff66e167-dbd9-42a0-aa42-d65736417b51", "target_ref": "attack-pattern--ccf3d1d2-e476-4ce7-bcdb-4aa7379c0125", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb21e6b7-279f-407f-9189-bbf1e4c934e4", "relationship_type": "indicates", "source_ref": "indicator--ff66e167-dbd9-42a0-aa42-d65736417b51", "target_ref": "vulnerability--c81e14e0-c6e8-4463-9ffb-b98b2c6a5160", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c277804-742e-48c4-96d5-6655b219935c", "relationship_type": "indicates", "source_ref": "indicator--ff66e167-dbd9-42a0-aa42-d65736417b51", "target_ref": "vulnerability--b4c1dece-ddb4-4491-80dc-4a235237b191", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a06a3856-8e26-499e-a0a0-75589d674917", "relationship_type": "indicates", "source_ref": "indicator--ff66e167-dbd9-42a0-aa42-d65736417b51", "target_ref": "vulnerability--a2257583-2ae2-4920-8e5f-444787dcd26d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b0a74f-83a4-4a6a-8cf1-dbc06d73909b", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.225.241.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8080eba-c086-472c-90a0-63e2af89bec0", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.229.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2879a7f6-f5ec-4626-8bd8-5241125c7596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.61.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099dfa13-a5aa-4060-b86b-49e5cb7113d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.110.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944d9c95-aef1-4b4d-9878-b21824ae82a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.176.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2775e3c3-af7e-47c0-ac45-2287b8a199c4", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.246.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb38bcdd-81fa-4988-b589-b3fdf0033d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.243.96.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198daca6-0897-41a8-99f8-3a58c5bc53e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.81.39.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e32c19-e7c6-4512-a1b9-9e5c9c90cbc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.90.70.156']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a9f76b-487c-4fb0-ac06-ef8b7a3b0b3e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.103.243.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecc94d9-3424-4828-b74b-eca192595339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.133.91.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1f7778-fd3e-4578-852e-337df7343e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.134.27.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50528be8-a612-40c5-83ad-2656c1fe8b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.143.126.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7055ab-1630-4f4a-b153-acab7f1aeabd", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.143.136.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc87f557-0fef-42bf-af44-b386315c96d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.250.221.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576ffa65-5970-4de0-a3a5-d7b1e3a89ef9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.40.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c063e843-c5a0-4534-880b-ce4bb3544d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.50.54.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ded5d64-1363-4577-86a2-c5ffdd9f5348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54e8736-854f-495a-9a47-9ba053fa0741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e798939c-5c82-4b55-b056-308005c1bbdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86dc4983-e0df-4618-ad8d-ad870a0acb5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7239dbfa-19b5-42d5-9827-3cecf4a1a21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.120.162.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf18cf4e-5afd-412e-a1c2-671032221e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.142.158.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598e7db9-9833-441d-b9b5-9c0feb435947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.221.195.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a88dac-707d-4a99-aa41-9771db30df56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.255.220.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d51e7bb-4a53-443e-b368-2d644d058d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.59.100.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4ba018-0742-46c2-b121-cea3feab40e7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.59.38.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fe95d8-01b0-4a35-be39-b4d60bd31877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.76.158.145']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1182dd-5b23-41e7-ae04-9ab10d349521", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.150.241']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd06ca85-284b-4f28-9db0-2470c9d90d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.146.28.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d378783c-49ce-411b-aec1-2f6fae7d038c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.158.125.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd70d687-0676-4946-b716-643ffe4aa160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.19.156.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081ec4d0-1618-4ea7-855e-ec5439c136ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.240.40.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71dc9b5-2674-4881-9edd-2cdab3aa93e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.255.114.108']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80364d7-3fed-469a-af4a-91d8994591aa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.60.134.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4f3fc7-99e7-48f2-83fd-0726f057c86f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.7.55.13']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952cb913-4c34-4c36-badb-31ddbc068ed3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.105.64.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c32200-2159-4557-ab66-2f6e32e7db02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.107.142.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3cf312e-e093-4d82-bb94-7bf6895b8fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.155.52.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d4cfac-0607-44b9-9b5a-b30962636624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.155.62.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600866b8-bb4e-470a-bb31-f0f86de1afc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.60.151.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e87765-a44d-4581-b236-89ed0a49b2d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.69.29.90']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5010431c-935c-4686-a299-598c3990c7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.70.89.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d39f2c-9c0c-478f-b62e-3c674fd417a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.73.0.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850be91c-996d-44ed-bbb0-f45258a592b4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.77.117.255']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c719eb84-132e-4986-a9d2-ed3c58aa06ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.86.232.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f6d2c0-847b-4f7f-b610-7e5697cf25cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.88.3.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6d690d-57f1-4fdc-ad7d-b54557137394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.90.69.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1d822a-2967-4cbc-b769-1a1571e7b6cc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.182.219.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04f3f00-c2e4-44c6-8dfb-fd71648ec6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.239.243.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e54d9a-a946-4e9f-80ba-319eb80f594f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.116.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7cf2f3b-e52b-4a07-82c2-db0fcb67e3b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.120.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b349ea90-bae5-4dc1-860f-41c9736070c4", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.127.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f62088c-e4c2-4958-98b6-631ceeec13e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ed7c7d-3e8d-41fe-a90a-2497906b1c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b13ada1-b2fd-41fd-88ad-41d509c0abee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69688f69-417c-47e7-a915-cae9d950658d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb71dc38-6452-4389-80b3-47b891203c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceae331c-c612-4612-ab9f-bbcb7e9ad834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d881ae-b2eb-4d32-9eda-7f61c3d2ba0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.184.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44c2521-b940-42b3-85c3-8c0bc8448beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.101']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5345eefb-173d-4fb9-8737-008532fcc5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1a5819-49a4-4dc5-95f0-135bda49416d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.125.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb924051-7dec-464a-b907-6555c21aa9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.250.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329adcae-287f-4b5e-86a2-d5e6aa33c65d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.1']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475b6619-5419-4d06-80db-4226235c228a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6502b9-631a-47ac-9c4d-60152fd5723f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.241']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7480aa44-d360-48a2-839c-d33181e09692", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e0baae-3e93-4a6d-b834-96e63542bb7a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464c1049-cf38-45da-adc4-6fd5173cc3a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb846bc5-37c7-4c3b-aa7f-90707535a979", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.84.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd7d4a1-bc42-449b-b89f-8c7129d5fefb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.81.23.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f0c7fa-7309-4fea-89ae-58e6db04c3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.249.80']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25d5c12-ef02-4d74-9211-23ff994082b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.209.3.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91589d81-596b-40b5-bae8-d67c04445357", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.216.177.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22367c8f-bf58-447f-9c04-4d3ce88792d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.216.189.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678ad736-5f94-410e-a6b8-941219e5565a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.63.62.103']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d413e7-b63b-4fd2-8784-47e7d6f53251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.64.172.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f291e9d5-1daf-4861-9e01-7a02b973156b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.76.83.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b99729-493e-4cc8-8093-aa4b83b06d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.1.65.162']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d5f086-9989-47e0-b5da-85fde19a34f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.100.63.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140fbb4b-dd0d-4ee5-80d7-72b0313f827c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.122.71.4']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950723d5-a255-49fb-8029-3d91f0a27d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.224.140.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3552f29b-5d37-4e84-a00d-4e6fa6812e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.224.183.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da2d26c-d462-41aa-84ec-b7360a7d37d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.225.15.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b5c35a-5208-47fe-b175-a5ce4ed107ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.228.45.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae769ccf-16bb-454e-8aa9-42b933cf78a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.229.35.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d48bc25-b3cb-4042-b44f-ced641742c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.92.200.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1528f8-32aa-4ad7-92d7-347d25ba291f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.141.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdf777b-a2f6-43c9-85e9-678ddb0a2d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.71.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8983884-0a7e-4aff-afe4-f14c716ccdf3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.23.154']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64837ab-ad91-44ac-9e68-2bab31bd5f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.36.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc78c958-6f96-4128-b535-c8200b673881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.59.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6393ec5d-c29e-4e04-a55e-ad7d0e608c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.100.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807cd9f9-e25a-43e8-89f9-77298d6f7981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45944c6c-135f-444e-9bdd-2e7d4e418180", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.23.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce7ab24-07d1-4798-ae04-cff3bb16d557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.94.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2f5a67-ed60-4192-997e-95d1c302dcda", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.49.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9440e6b-4668-4552-b1cb-67962f7fa0f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.74.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3bdcfd-98f0-446e-86a0-990f7d568fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.232.154']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca241a51-54b1-4c61-a01f-1d9ac29bc79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.37.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ffcb037-d76d-488a-a88c-1459d6486927", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.156.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf653bc7-e33e-47e7-89ec-731248e97b56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.175.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8206ac-d103-4f5d-bef1-b54914c8cf03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.180.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b544852b-367c-43b0-86e9-2654ffd23053", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.191.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6960381b-a573-4858-939c-c9b7e6641be7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.43.147']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831f4843-5c26-4d06-b3bc-17bf06da15f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.91.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0acc50-edc0-4a9d-be72-b11e785005a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.140.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4b394d-e0b8-4aa9-9584-35c6bc443101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.143.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa8136f-6241-44bf-a968-96a4e0119285", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.148.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd86f85-96a1-4f57-b3f7-a33a68051ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.207.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3b86ad-e9be-4650-b358-70ed86d48c17", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.225.169']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae32b356-5489-4413-925d-7d83046ae71d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.161.217.205']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0245d5-15b5-490e-9b6d-f287330e321b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.113.160']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197daf3a-a50a-4e80-a877-ba36d6869d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.232.168']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a197980-1c61-4c6f-a09c-81a3287c6ec2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.80.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9491ea07-aff3-4609-8244-49f4e266fe04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.192.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd20fc5-492b-42e8-83cd-f3f1ec495658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.194.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0079b71-e8ad-4919-9fe6-896b3116e4c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.125.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7049528c-f1cf-4ddf-9d8f-798e5a0056e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.167.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6445c58d-51ef-4352-b2e2-417f396006e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.7.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54cd8da7-8293-4cce-849a-3c4ced9b3982", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.128.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea81574c-f37a-4799-99e4-ff02f11543bc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.247.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2a100e-58f7-44be-be99-7f4cb242fa4c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634019ec-5a8c-46b9-9fbe-14cf766476a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5146bc79-a097-474f-93ed-ded190469a36", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3c401d-6328-4783-be46-f75ec6eff4b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e775a6f4-001c-4cc6-ad7b-0db21ee6456d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5cfd0b-614b-40f3-9d9c-3b6e949bf134", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a6e6a2-ea37-496c-af84-8a1b52afb5bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38291eaf-1928-4568-86a4-2c967173ea4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2ecac4-94c6-4908-ad37-46586b7562a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09128a1f-c8f9-4b32-8535-77b79fcce84a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c8ec29-6a04-400d-b86b-06a29cad450f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.230.94.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd497ced-3dcb-4d6f-a761-606846aab2cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.14.35']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35423a6b-528c-4694-8296-8bc7fda398cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.127.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489e914d-17a6-422b-80b9-ce19f14de593", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.250.161.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d29f9f-8bf0-4b58-9e96-aa9f2ae252c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.149.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0cf363-b992-42ce-967a-bd17baef8a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.120.126.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884fc1a3-4b28-41cd-a7bd-993e6d994ba5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.195.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac5a7d5-4058-4661-be0c-f223232779b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf731b5-5d31-4220-a77a-dcfd4afc5762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eae66b0-f1dc-4870-a71b-f6f632eb7186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bfe43a-acb5-48a7-9ad0-409851adace0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.138.16.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d980585-f604-41dd-bea7-f979d95f4338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.138.16.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3496a3-44c2-4f76-8253-fd0d426aeec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a93c5d4-13ba-4314-b13b-cc7fcb24896f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894a43d9-16ac-43ec-9a04-e7c39979ec19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed68953e-9dc6-4dbb-9dcf-12fb2ddc6893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad911b67-5565-41f2-9a8a-cbab9a8299cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.146.55.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c9aaf5-30d6-4150-b172-9d0a23baf828", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e924549-09ac-4380-8ab4-d370f20dca42", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e15473-9683-419a-8190-c283966e1ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fcc8648-dd04-4473-b993-f14e2e81de75", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2afb36f-839d-40da-a0e4-96fce28b481c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb22ea4a-e718-4f90-b7c0-4e88fb346048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776c2470-a4ed-40d6-86b2-aed95729f210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67d194d-866a-43e3-bfba-796ebeadbbde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1ee528-9e9f-48b8-8116-fc8718165e84", "name": "Malicious Host", "description": "Observed: WEB activity. Web exploits: aws-credentials, php-backup-grab. CVEs: CVE-2002-1149. Sensors: cfglobal, revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.62']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:cfglobal", "sensor:revproxy", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--082075c7-7a17-44a3-8492-e4c2726ac8c4", "relationship_type": "indicates", "source_ref": "indicator--5d1ee528-9e9f-48b8-8116-fc8718165e84", "target_ref": "attack-pattern--2099f92e-22d5-4f56-830c-a0f433029f77", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--721c73e3-3876-4b5e-8023-ab0c579cccc1", "relationship_type": "indicates", "source_ref": "indicator--5d1ee528-9e9f-48b8-8116-fc8718165e84", "target_ref": "attack-pattern--711771cf-7c5e-4400-8a3f-98333c379d2b", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--592e6eed-1186-46f4-954d-17a039a3d71b", "relationship_type": "indicates", "source_ref": "indicator--5d1ee528-9e9f-48b8-8116-fc8718165e84", "target_ref": "vulnerability--c81e14e0-c6e8-4463-9ffb-b98b2c6a5160", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2222cf-d5b6-4cdb-9a44-ab4c73b8c40e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5297ecb-46e3-4ab7-b7d9-ed7a0a140a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.148.31']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e42107-130b-4e67-9027-93d2228565f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.151.123.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec36b418-1b45-4bc3-82cf-80a6cee465d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.152.160.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91146310-15a1-47c5-87b5-862de11a63f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.158']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e46c11-1206-4dfe-b524-59597f7dc420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870d849f-8c0a-4949-b7d5-037059455656", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.244.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa4b621-2eab-4441-971d-e15b068d2e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.98.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e159b80-0f6f-4a94-aaaa-dd914d2a2129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09a3762-3f25-439b-b987-ae6c354154f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.152']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597bbca7-3d3b-473c-9f85-2a22c23c2b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7eb639b-ca61-4368-9ea6-e9bc102be59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48c983a-56b6-47df-adcf-c26ceefbcf5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f87c59-a75c-4fbe-ba9f-987fb6595bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a03a15d-414f-4874-b955-26b74c443874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7e386b-e190-4219-88a0-fafaacc72cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814ec6d4-9bc0-407a-a9e5-7d39368af6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.108']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2571540-afe3-4213-8d07-3f3d735c4149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53d93c4-8636-4e2d-8a57-f6811a2803ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.156']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39c8c35-eb94-4b81-80c8-58262af29f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.161']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3430e863-7818-4608-a6be-70c591637d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72531ce-136e-4cf1-8b13-d10cf411c3f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.169']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5eb63d7-b63d-41d8-ba50-deba59c7be72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac8d241-f719-46b5-82b5-70b08e75d9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.176']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be6e2c6-cb9e-4b73-b53a-a99fe55f163e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdb94f4-4a4b-4d22-8168-7633520a7b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449d97e4-34fa-4596-a339-edd9c42b95b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c20dab-ad13-476c-9a7b-795c506cc23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64cd6f23-566a-4ddc-a57a-f6e29a670137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64554d3-321f-4d5b-b093-cda8fc978b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c291d9b3-6964-4ccc-af3b-4a0423e94cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f26e4a-7433-42e8-9b0d-5c2251dd0290", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.147']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a50ac3-0ab8-4324-9d2a-6d7ebd2c9f3a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72472362-5a6c-43ed-be89-12642e40db82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.158.127.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d76b20-fe26-4ea8-8fc0-01a7987a58f2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.166.151.63']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4fcf1b-7ee1-427e-a9bd-c9f7259cf5e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.242.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2defc7c-b4dd-43f5-b47e-90870410e70b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.187.36.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8983c8-4507-4171-8e0a-57822363190b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.189.192.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4270606-0e09-496f-9cda-10adef970494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.191.44.4']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed29dd6-4ec1-4afd-a684-721cf6490e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0068373b-0244-4b92-a436-683e7f50b1b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989ec4f6-df55-416f-af2e-1b8d47faf44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec698dc-100d-4cf3-8e2b-fd95d7956c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be98105-ea0e-4bbd-b322-7aa8c83e67a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d332de9-ba37-48f0-942c-daca29dd74b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bc7e0f-e114-4051-8b44-9830117f83fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07cdb97f-4ae6-48e7-b89c-7fdc14e32364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea282c2f-931c-42d0-8fd1-29a9605e854b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497d9c24-6ac4-4714-ba39-82d23bb5707b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d9561f-566b-42a5-9397-4cb40619388d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1001ba42-aef7-4681-99be-33a7f696ec5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17819319-0125-4d17-8ca3-eb93c26d4ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc49670-3541-457d-9e91-565546c04223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8b4190-2d8c-45bc-a849-58e0eb8e024e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f9aa07-9340-49b9-b510-4c6b637f30e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.60']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081af67c-f7a1-4c01-954b-0e305e3b0ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc854ddd-46bc-4ca6-9796-4b01efe7c833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.62']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58783c2d-96ac-44db-9d8f-242b35016a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.63']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669f325c-0445-4b1b-8e6d-34354d23215f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8933c37-1239-4d7e-bf20-3ba68193c50f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ae0182-bb60-47ed-9688-1b0d9fcc5636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a267b047-b18c-4bb8-91b5-2917e7997a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00031bc-ee08-4837-8743-d5de59ba5ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d3c2c5-7a54-48c4-a6d9-d320ef05b140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b88378b-5424-4fe1-b636-34b6ab3acf01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa92f0cd-889b-452f-bfdf-ebb52f7fa757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c8b110-e300-4619-aea0-c87b905b37d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a32e165-a248-4e58-bd7d-74c418bb33a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2855e996-4c85-428e-b168-6e96564d6c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9edf3b15-bfe0-4a19-8b44-8d1333c88e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38405ce-12bb-4ebe-b69f-7c92213a98f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dadcaa4-3393-4074-bed6-253516cb68ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.241']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb06af4-77a9-47d5-96db-8cd7c6bd1adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99feb001-81e4-44e6-83ee-97e6641b1c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a72e9d6-26d7-434e-848d-cf9631ad7fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165bfd18-081d-40b9-981f-d131902cdf65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f87762-b9fb-4194-8d64-60f15e4ba4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868e191d-babf-4496-8db5-9346d87a2ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020b5d4b-1555-4000-a4f1-fd90102a2ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.221.114.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13524b39-8050-4186-9158-f7cd925d5ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.161']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e9e283-ac9e-4c20-8a11-7e56a08a8d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c2d48b-5840-499a-ad2c-9c54b8f1f282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1194feea-16e6-41d5-b3e0-559ac7aa241a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.231.242.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e281734-3c46-4787-a033-9f16b9333a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.234.103.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2308e479-7c65-4a61-9ef7-902b570b3721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.238.55.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f579b998-344c-420c-8e0f-edc797e5552f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f524ed7d-b4fe-4764-83d6-50df8270e1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc13e08-c14d-4541-84a5-418a47047607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2511e2e-f1d5-4978-a378-9b11e782363e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7292d8-bff9-4ed0-89dd-9472424ea193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e59286f-cfe4-43ee-a9c4-5d7e9bab68c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4afcc6-17db-4857-bceb-08d203176d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.33.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ed7fad-ae2e-4989-b903-999950915bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ec4ea6-efe0-456b-8933-448588728997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921b48b2-cd59-423a-859e-bcf477ae6508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa2b3a9-2b9f-4e5e-8963-12a15ba052b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.46.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f490a31-58c5-4e86-973f-8ac5e3632bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f27b3c8-517e-400c-a503-58b64ba9b341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.72.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c76b422-2fdd-46f6-8ea4-9c2149193822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.72.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29328347-b5b5-4071-96c6-4e435718872b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.73.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a2cb60-0a02-4b68-93cb-35de2c7fa3c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0151c75-24d1-42b6-8d60-d161d0bed631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c910e90-b941-4ebc-b7ef-95855585726d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5355b4-112e-4796-af28-a3b66bfcb848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2edbf24b-c7d5-4dbd-953a-6cc58a4d0acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.180']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc83a8f-7cc6-4533-bb3d-3ef38c0573db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.35']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8b3cdc-73f4-4a58-8900-da723e610edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d377548-34c5-4e11-829f-e99e5d367c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc71fc9e-ed8a-4588-a19a-54bcff366998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.38.16.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a6c6ec-2d20-4263-bf78-193479b5620c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.38.20.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160c32cc-d472-499d-82e2-abd4d1928365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed566561-9d68-49f9-8c19-0b5dc272b13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff01653e-1a5e-420b-b365-0fc5fe1fe61c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c785a3-85bf-4487-b082-01478da8aae4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.37.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda20e90-b004-4f8a-95fb-21d709336463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c1e915-71ff-461b-80c2-344ea7245882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a4325bc-ecf9-4c7a-bacc-b1f03cb38f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca73495-52a5-4624-8031-3a23ba1bf3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5c7d4e-309a-4bfb-8605-155e82bc40e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.86.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c3c31e-be26-4e54-82e8-eef78f408bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.185.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928285e4-50b0-446f-9ff1-bdb576150c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.236.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581f8789-c6c9-40e4-b15c-29de113c829c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7d6776-64eb-460b-932b-2a6b27af3206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f14ce4-1cc1-46f1-803f-1f90953a2b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614ba8d2-cab0-416e-b036-a34375eb170f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.150']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d443cd7-971a-457a-a19d-16c4ea5a9f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f424e4-399c-4dcf-9428-32e9bb29ac47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2a7a37-56de-4399-8f58-4234eeaf51d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d72b99f-e4c6-4c55-8a74-babcea03e537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244a143b-1cd2-4483-b1ab-e571aa025bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf968ee-909c-43ba-a524-b6fd8bb6673f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11fac661-0535-4319-9d89-8944e23ed4be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a435b9-44d4-40ae-81eb-316bdf502714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc06871a-ff2d-44bf-ad8d-57c12a4a6172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb261619-cda3-4352-94c9-c3d3f34f41de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3451306f-e189-4187-8789-c444217c8052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.104.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dced8212-5afa-4e3d-ab73-045dc0b07de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4ccb8c-3c30-4057-8d0f-3e8eee5fc62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c19a32b-ccf1-48f3-932e-49a78c4bd1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06a0b1f-2b09-4f56-ad0b-5989e3064ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f169f625-f3fc-4df3-be40-89d2c5876567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8456dfd2-b416-408d-b9c5-dc2739e56290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43876101-0b8a-41ed-8e51-ab8dfb805e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.58.147.154']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4fcad96-4b61-4536-bc2c-87cf957cf2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.177.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726b12ff-cb0f-425f-a076-a55736425451", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.177.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5932ee6e-5c44-4b49-a649-0c863d729c86", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.177.183']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ceb21f-3bbd-40fc-abb5-8afc06f5ef5d", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.177.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3fd29f-5d58-4536-bd18-bfdb7f750417", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.177.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da464948-663b-4b65-a1b0-bc41b50626ef", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.177.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8f3f75-d977-4499-b6b2-3094a01cefa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.64.215.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adea9f69-cf70-4416-9fea-ebaab546626c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.71.81.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c242a3a8-8668-4ea1-aa02-b18441753636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.61.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d5d442-7f72-49ce-9ab9-c36885a31d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.103.169']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305e9847-a523-427b-aa60-cf891f36e1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c451c253-711d-42d8-9797-a93d759b79a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a967a80b-ac4a-4050-80b0-a50276928159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c99c39b-3a9b-4c34-8da4-656f4f39c8aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51e5b5d-87e6-4ec2-b388-54f32f54082c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2e54f9-c462-4074-8a17-793766572dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfb37bb-cdf5-462e-b8b7-487f1c610c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.153']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddcaffa5-d2f8-4fa0-b817-69d33329c13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be3e581-8c8b-4e95-b902-88b34e9c820d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.138.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2a199a-6490-41cc-87a3-034ad089fd9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.138.126']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108b7673-4640-4dc6-b9f3-389dba4e2958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9db1c4-f67c-4035-aee9-490b1277bbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda7b792-642b-4c18-821c-c3074b1f4045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026340e3-bb98-4076-9945-414339805b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786ad319-c935-4932-b8a9-8c54707a75c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb714ef-ba4c-4a84-a50a-b4c0e3802d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d323ec1c-d32b-4c52-9423-05baf0b8920f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50fb0748-b2bb-457e-b2f5-5cc2b6496d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.143']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2ee1cf-bfd4-4900-9096-6d7808f5133e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.150.200']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18465d02-e968-49e2-ae3c-de3631fc65ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03bb1bb-dfe5-4c59-9a42-71d3ac9ca38d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b814104e-d17e-4fc4-b937-0a4d3ae3db73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.159.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe51b563-592e-4372-9c09-3075857d6bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.160.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ebc429-9e1f-43b5-bd85-b66cd555d1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.160.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe51153-b180-421c-9b9b-123507299ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ab6e83-9e5a-4250-8704-45c53da1447b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447b3626-c841-4130-ae1e-75070b7c2e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.175.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b2e0f3-2860-433d-a56e-9c1d7a8610e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bef051c-079b-4358-8646-b5d844675eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.184.164']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763a5ee6-f380-480d-a708-439643bb3599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf49208-8c0a-4639-a6df-1c0c5696f49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b9864d-618d-48ae-a84e-696a33d23530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207e455a-b2c6-4fdd-a199-ab092053a9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47dbd939-97f0-40ed-a3da-bc5ffdf49cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fecdb636-a837-4584-ad7e-3f4753b6ca4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.9.95']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d90758d-b59c-4066-9c3b-1fa53344b83a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bec45c5-8dff-4b89-acf9-8aee27f31ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3875ffb-8167-41af-b8d1-2bc658d3b0a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f5ba6c-5d6a-4bab-b538-074b46777013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916994ba-879e-4435-a62c-9f0b34eedaeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e3ee95-3a91-433c-a4b3-b5b2d74822b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a55e511-0a9c-4cb3-8728-79adb6f9a4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e9bd05-9d37-411b-9d82-6f89f9fb4218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c3d848-9b3c-4c36-bf89-fcf402e46a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d80b79-fb1c-4332-96ae-f50956922754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49eb76ff-2330-4bf6-b669-3015c37ab459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bdec676-5566-4aea-8ca4-7a6d24eb0439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78346f3b-4655-4f8f-8eb9-1ba9c957ce86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98777f1-4ae4-4224-b350-8941cdb812a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc52f09-21b7-41af-bb56-2925a13388bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d4bd4d-1d4f-4d0d-9d36-dbc9d2be1c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40644806-7856-481a-a511-0c2a48cc2dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01dfcab1-7633-4bc1-84ad-8d897da8a9f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b3a514-110b-49b2-bdb1-20d4b89431b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d39745-9e73-447b-9841-5d9feaf7b39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375dd19b-be0a-4979-b276-a00a6d88ecca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd476cb2-0925-4ac8-bb58-17473062ad03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f9a7a9-c159-45fe-936d-cf86a1dabb9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302a58cb-294a-48b7-8658-3dce1d9e9939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a68c1cd-2f55-4383-bb31-50a6ab9ae0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9cf876-5236-4f54-a44d-4967118483c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d347a3d0-ef5d-4815-b658-63b38dcc5b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04507e66-5ca8-42c3-91cd-68975be9eb21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.103']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bd71ec-e147-4577-b6b0-1f76ee66da89", "name": "Malicious Host", "description": "Web exploits: aws-credentials, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '45.88.138.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--effaaa33-0f0b-4855-98ea-5b923052fd60", "relationship_type": "indicates", "source_ref": "indicator--28bd71ec-e147-4577-b6b0-1f76ee66da89", "target_ref": "attack-pattern--2099f92e-22d5-4f56-830c-a0f433029f77", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fd13778-963a-4234-98de-80838f2ef9fd", "relationship_type": "indicates", "source_ref": "indicator--28bd71ec-e147-4577-b6b0-1f76ee66da89", "target_ref": "attack-pattern--ccf3d1d2-e476-4ce7-bcdb-4aa7379c0125", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ada701d1-d541-40ee-a78c-4d4794516127", "relationship_type": "indicates", "source_ref": "indicator--28bd71ec-e147-4577-b6b0-1f76ee66da89", "target_ref": "vulnerability--c81e14e0-c6e8-4463-9ffb-b98b2c6a5160", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6a293c4-5450-42ce-8748-20ec9f792943", "relationship_type": "indicates", "source_ref": "indicator--28bd71ec-e147-4577-b6b0-1f76ee66da89", "target_ref": "vulnerability--a2257583-2ae2-4920-8e5f-444787dcd26d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03353cb-352c-440c-add0-3ee16c9e12f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.168.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6497643-b401-44ec-93e7-8ebdbc42bb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31e1008-f76a-4ac2-8fb2-4374f1d78bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.95.172.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be640637-7351-4196-96ab-113e96aee0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.0.16.241']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd49b4e-dbfb-4f33-aed1-0cabbad7c38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.127.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b977d4-9004-40c0-85e1-7f732dd801f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.146.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45355c2d-568e-48e0-94cf-49ff7279245f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.102.225.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed631a23-003c-429e-b46f-7e85c2355449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.35']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84db925-3d3c-4056-a141-4d0af0d87be5", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.146.234.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89ca404-367d-4d90-a301-97fe8e3b53e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.150.71.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d29b38-1488-473e-807b-efb77e65281f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.150.92.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e38730b-8db3-41d0-b114-83a09c0418fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e74a78-b59d-46dc-b5cc-d2830677283d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.95']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65938c0c-a20d-4044-ab3f-6740714aa365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.161.50.108']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8595d0a-14e1-4ba3-bd5c-d4a427dd67ef", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.137.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928c3745-24b7-4ac0-81f4-faa0873b9057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.138.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6a2477-490f-4587-b2b9-2746031b75e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27bce81-e55f-4506-b599-f4a3758fd22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.217.250.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6f694e-ed15-4cbc-8dbb-0a3e955c4e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.229.233.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fedb81-7202-4dd9-a622-63c968f7cd21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.232.235.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3367cfaf-9839-4515-bf34-f2e7b33316b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.156']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2498d83-fb36-4c90-bea4-fe353a21c768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eed15d4-b88d-4317-a3fe-80f596cf39e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0afe27-1191-47b3-8614-ca3c1f15a777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60435304-bb0a-46b2-813d-6bdc892e218c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166a6e14-5f99-4489-8ec9-84fff85ce63e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9365ef9-cc78-4e1e-af34-d52f7786c074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.63.5.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9539192-9b86-44a0-846b-c847b9a3e1e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.105.85.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa0f859-880e-4b8f-944c-ad4abd008dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.109.134.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc70bae-4ec7-480c-8d01-1f06af3f695b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.120.30.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbe2f58-8d9b-449e-b7c1-75b866edbd67", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00d9dfd-d528-4984-9a94-ae1557fc8eb9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e948e48a-2ac4-443f-8c08-4d663abd1cbc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--defeff3b-9b9f-4402-b073-ccdc502388b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31f68ee-3cc2-44b8-9b92-2b5afbe7cf45", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.48.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9744fb77-cdab-4efa-ab4c-cdf4394f9e85", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.200.217.200']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e207ce3-4a33-406d-bf0a-fd26b3abd3b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.194.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216a4f67-6e2b-463c-8404-2f4e0d0282d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.24.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667ada3c-fba9-4356-9822-1df54f1bf697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.90.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7bd59e-2473-476c-8924-682250070a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.103.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce76d70-78e5-4eef-a52b-4e2a1515d655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.214.145']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1da196-ac3b-49b6-9dd3-74f603a6ae57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.10.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4bd77a-2fb0-4293-a900-0e4a7f0f6d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.130.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7908f852-4eee-48bb-abcc-cf2006e9fc18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3431757e-3e3b-427d-9966-3e42e736b7ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbcfc74-0497-48c5-9028-297df2d2ca60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03cd172-94cd-467e-833c-7428adf34702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b10bda1-d416-40ab-beaf-1b8c82744740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441f2bc1-6534-4724-b164-7cdc42064584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9494efe5-202f-43aa-9eaf-7b09819296d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b0f2a0-bdb7-45a8-bbe5-14c73c3b6030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a619e94-684e-462f-88ec-cd3110a9a225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae95e656-2a6d-4c91-a7b7-730c5351b205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.114.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ae258a-1316-4a46-924b-14b55ceb1420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.118.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c368207-6d25-444a-ba69-721d30a0a992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.121.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5160d547-5981-4960-b881-54dcd236c56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.123.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb0082a-edea-4620-9df0-c6bd676eb7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.132.90']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3010f0d4-b019-4c39-94a4-2e418f44cd02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.133.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca1afe7-7993-4d6d-bc7d-6b3ea428d1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.151.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54fd085-e369-4ae3-a521-90bdace7cd7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.163.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31abf6eb-35c2-42e7-94a2-6eec8c83e4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.179.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ddc903-57ff-4255-ba09-ccacb2009898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.195.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d1007a-a094-485c-b832-fe75b17cc497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.42.174']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5948191-eeb3-49aa-8213-cd58c677958a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.52.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a446cced-af61-41eb-bb25-74a72bef8103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e572087-23aa-4ec5-a69b-1fc2926c6d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.86.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242a4361-03fb-40b0-b57d-29a8ace4ddd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.91.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aded10af-593b-43ca-a37f-a5eec572ed51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.101.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c592ccb8-27ec-4571-a8a5-af2eb765a08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.106.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a666ec8d-7a44-4dc9-bf1f-e787fda3b3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.11.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d910eca7-1d14-4a7f-a84d-e2e64fddd466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.113.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52efd699-b795-49e9-9f19-96dead681629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.119.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a38625a-9ff2-429e-9d9a-7caedb75bbd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.120.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6083a7ff-9567-4b37-8eb6-9fdb6f2bea37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1c4920-d120-43b3-920c-2af29d3cd6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0e1edf-9247-4e08-93b0-150e6ab6935d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b32468-a21c-4f92-9760-1e048149951f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f03d9a9-1dbf-41da-bb3e-f5ba786372d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.143.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f74c5d0-c339-45a9-adc3-bf6599c68052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.15.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf6d75a-2ab3-4484-9e5f-5e738f64bb2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.162.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48743a0c-b453-46ad-83dc-cf53168624b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.164.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8189a1-f2a4-46d1-be95-d117571bc834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.168.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc600c86-342a-4786-9fe1-25e9280893e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.174.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9d8c78-857e-4592-8afc-e24bedeee65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.184.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff87134-2471-4288-a675-6add74d43f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.191.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6a0ba4-a461-478f-8f0f-4a17cc783854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.24.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbd84f5-b274-41d5-acbe-f3870b0cb908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.244.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d202bd9-9fec-4a8c-9883-b4e378d30630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a1bbb0-9408-45b0-8635-3e9e5410ce4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.25.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99dfc2ba-ed6e-4a71-a331-96886c0a2c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e352bb57-d4d1-49ac-9c25-349bcbaa8fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434c9513-de57-4a44-80d6-63f19a49f7f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.34.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7bb818-3467-47ff-93a8-b8b95c1e9fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cd8454-f974-4f38-94de-b68962cf16bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea580e0-2f41-4af9-9b9c-66f4cdcb4061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5aa353-aa46-475e-8a80-92c14b4a34d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341af1df-c04c-4fa7-854f-11033f97a36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.84.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c5c6ff5-2385-47bc-91fa-0d7c4f212c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.84.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06bb7d18-956e-4785-9d92-046c768f6f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9432d959-1c99-42fa-ac0c-a67cc014fd6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596d2486-0a86-42fb-80f3-d621ee4bece8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.98.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6ac50f-63b0-4d95-8db1-79d682965104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.218.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c2f491-96e2-448a-95bd-5d9ac59567c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.5.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30269b91-ad87-45f4-9234-1d029c6f95b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.131.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d076f3-02af-45d6-a5ba-52507d274e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a91baf-f0c2-4bb4-b56d-546ff36284c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.15.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfb5ff2-7afc-4d46-8717-51a5b4af085f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c552911d-ca45-4c2d-bed1-0b64dab33618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.184.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac976d39-d97b-4418-8b48-9efe9546dc86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.197.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2297d4e2-d9da-4a65-8374-1a2f04b6d3a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.21.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0457326d-9757-4c54-adbc-e7d4413b08f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.213.105']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df520cc6-05cf-42c2-8715-1fc2b1f5a139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.238.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f18c8b76-c183-447b-9043-fca5beedaf50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.240.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f5bca3-7bee-4255-a0dd-08c3271bf21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.245.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fed4a96-3137-4804-b3be-7b67c79148e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.25.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61a19e7-dd08-4b81-8362-56ab81d53c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.32.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10eb4d5-3c1e-4b83-9a42-b6ca4a167acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.37.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79aa9ba-27b9-42ea-ab76-383df5231571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.38.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c33606-5176-4c44-bbce-b652811e781a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.44.103']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73239d6c-ed49-4259-8238-36273da3ba5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.46.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94c95f8-d98e-4675-bbff-a2a754c61144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.52.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8523ba8-97bb-4fac-978f-3585f8fce74e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.45.19.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76628dd-232c-4c9a-b691-eea0cb46ef26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.4.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d5285c5-cd43-4ac8-a676-a6c3e26d3a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.4.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a654c966-b01c-4f61-a3ba-0312519cf8f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.182.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a0d372-5e70-4c4f-be79-740d116982f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.182.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4da7667-1ff7-4826-9218-bf17901edd4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf698a9-e4b1-4e10-9bf6-01d0f7ecc30a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.225.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8270e260-ba15-4717-b051-ab6e62d2adf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df90269a-6470-4128-90e7-53db4c159a5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.79.13.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50707fa-ad94-48e0-b95f-d35e3b04d0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.82.7.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc4411b-93a4-4a34-af2b-853a05db75ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.160']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9a1e70-0c21-40a0-92ff-083965fe3c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bfb8e13-62c5-4377-9dfb-ea25e6d638fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90962c8-1111-4492-88d3-f8f5040c44f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd974cc-a61e-4e86-b535-c6ee7261ee3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7d06c1-485d-4623-812f-1f033a91298f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6eedac-fb68-4422-96b4-7de1aabcceb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a711603-10be-4fd1-8194-8ab8bb42af6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d918f137-e34a-44e6-a123-b77cb3c0d6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.116.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f6aae5-cbe2-48bd-86a6-d2c7c733aa51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.129.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827c2f2e-6c37-4951-9c50-5b44cf6d7360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397837e6-cca2-4bc2-a4dd-04e939c9e320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ad7214-6d14-43c5-8e0d-50bcf4b32a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df973a2a-856e-4d8d-9582-7a65f6eff73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.147']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e2de7a-22e1-4aa0-b753-cde24900a758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af35df81-b159-4cc4-b2a5-75c1bca637df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05d33fe-3618-41d0-8d02-bdaf50350f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.126']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d687a8ad-1c57-4ea6-98a4-44a3d5c51eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc4dfb3-ee3c-4f46-b7f2-5557000dfb1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fe97cc-0378-4a95-990a-983194a801e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.186.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e150c9-0985-4a8b-b7e4-e602fea586ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.188.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d25e7f-e6ba-4579-8a7a-664c4ba59098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4857c90-908f-4143-8630-9ea417354b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb53134-8b5d-4a43-9d18-0799a3248d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1560ad1-3ad0-4915-abcf-b417357ec2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.8.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79cbf570-3b7c-4c5a-9993-8e5fe2ce58ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.86.63']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87251830-e349-44b4-a586-dd449b06b1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.193.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34cc7196-9a1f-4081-94d8-b1d75bb4f65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.250.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7f7e8a-49bb-403f-985c-e0126cd8cc16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.72.158']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a9432c-3639-4e26-a185-34e68d42256a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.93.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab6b3fc-707a-4ec1-a77b-c1907fd2d1c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3454f8ae-a784-4738-becf-35f42ae9ef19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.83.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061befc7-2655-48c4-9367-bcc7511dfe07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.115.217.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a28666-be57-488f-b83c-06993a2a4568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.12.78.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c54571-a21e-4f0d-9ee5-42f59485b020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.174.136.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad411aa1-8e67-480f-b62c-e9d8ee1556d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.213.212.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc1c3bd-f66e-4f1b-a523-22ec032eb392", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.247.138.161']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a5f314-5a07-4819-915e-7bad700c2951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.47.199.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df7b451-6ff1-4784-93c5-bd42434dbe7a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.52.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb106779-8585-40a7-a4ff-8f2b5662207e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116e983f-dbd9-4577-b249-c9ee89b33223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.134.48.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa9e259-68bb-430d-ae68-af614ff41e8f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.10.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63ddfb2-cc21-4a7e-a792-5853bc1f25d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.165.59.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be26813e-5c16-4171-b874-969357a5e160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.2.85.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51468177-5cb9-4e89-9d23-f6012d60ae8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.2.86.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8e89ac-10a4-45f5-8e56-cbd155733cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.2.86.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95431fe-bd28-4f4e-9423-6aa69cad5a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac14b4c0-ef19-4ecc-b5e0-782f41663b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b63c1d-297f-499f-9d79-070fb5232a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b85361-43aa-4a3e-a5c3-db768dd71d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562313c4-eb30-44c3-b58d-75bd6a54638c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6eb8a6-ca75-495e-b93f-bab5f9fe8ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.60']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6a6f97-c07b-4500-9b48-58e60832f5de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.237.116.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a943610-08a1-4618-8e1e-5428e72d79f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298fa663-73ae-486f-a7de-d9ec6ce25f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412d299a-bf48-4617-b33c-3873d7566ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.138.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28910c33-b513-473c-94bb-275679b4e827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.113.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d01e828-a109-4bdf-b2db-227b4ea81b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.172.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828a7d33-3d32-4313-8496-99e9a2f1abda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.20.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcbd216-12e2-49d0-9181-21d23acdf075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.52.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3cc1798-7d83-4b84-99ca-06231fbbc9a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144a672f-d9f1-4e65-b11b-b5fb8e973b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1522af29-e7de-44fe-ac52-84dc7584642d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816c193e-c70a-4759-97d2-b51bae358304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0661486e-d6e3-477d-b5cd-a6039f046437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1586efe-1d25-4ef8-9060-91c6e7d9a64c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545dd208-86b2-48ec-b3af-8c91897c58ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f058f3f3-c203-4342-aa4d-21de6e8a5416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0875276-23f1-494f-8aac-877a78dbae1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614fa251-cea6-4993-acdd-1f7c70854ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaaf7355-a890-451a-a245-d97f6dd7f34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.80']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d18ceb-ac73-4892-9713-6fd60df0fed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba573a19-8ff2-45f4-89ff-25624d1e652e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266e92ae-1fae-4c6c-9956-151366a38e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555cf83a-d09c-434d-8698-1fa908bff7e3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.72.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d57d04b-ba1e-4830-856f-77bc18189741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.72.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c66c7b-4dfb-4a7e-901b-392ecbe9e2ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.17.101.143']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc1acf7-792a-4aa9-9731-bf933c9851f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.3.85.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055a79cb-8e61-4a75-917e-178cc4d73780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.3.85.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90fabfa-3079-441a-b28a-6622b261039f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.3.85.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70bbe95b-da55-4ca0-ace2-49fc87c53b52", "name": "Malicious Host", "description": "Web exploits: php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656, CVE-2026-9198. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '51.102.241.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9198", "external_id": "CVE-2026-9198"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94e3f5e8-f7f7-4477-b396-db5dd46ceb9b", "relationship_type": "indicates", "source_ref": "indicator--70bbe95b-da55-4ca0-ace2-49fc87c53b52", "target_ref": "attack-pattern--711771cf-7c5e-4400-8a3f-98333c379d2b", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0247080-ad0d-4201-b2e0-18447bdb3917", "relationship_type": "indicates", "source_ref": "indicator--70bbe95b-da55-4ca0-ace2-49fc87c53b52", "target_ref": "vulnerability--c81e14e0-c6e8-4463-9ffb-b98b2c6a5160", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1bce9485-8eb5-4881-a0b5-248f93fb1bbc", "relationship_type": "indicates", "source_ref": "indicator--70bbe95b-da55-4ca0-ace2-49fc87c53b52", "target_ref": "vulnerability--ae9173a6-de5f-480e-9c65-11bbd60b77ad", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a13e28aa-4200-4aff-910b-6c678043d510", "relationship_type": "indicates", "source_ref": "indicator--70bbe95b-da55-4ca0-ace2-49fc87c53b52", "target_ref": "vulnerability--6438735d-4dc9-465f-aa37-42f44bbddec8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--081249da-074b-4799-be93-4741250402b3", "relationship_type": "indicates", "source_ref": "indicator--70bbe95b-da55-4ca0-ace2-49fc87c53b52", "target_ref": "vulnerability--51fabef0-a353-4d32-b8ff-98e2d3756318", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe5ae49-5215-4390-ae06-df6c08ca7216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac52d28-53ee-4171-b829-3899c89c6a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ccc003-1d61-4e3e-beed-a5f1eccc9f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83854167-2252-4638-bb32-33d3e938503a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94b3362-d1a3-4b5c-9d02-9373f49e8d15", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.198.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a5e4a6-d644-4cf7-816c-d9a51d17bc52", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.84.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f596661-193a-4ebc-9d23-1d640a3d121c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.195.223.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c884726c-5d26-4895-afee-d6815cf5ff4c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.195.255.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338282e9-649e-4241-8cab-5c1c57b7da82", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.210.100.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf44b18-8375-471e-88b1-66610d5d0243", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.210.104.180']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8caad2b0-0d5a-4235-9f4c-255c6650476c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.222.85.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e793ea6b-411b-46f5-a98e-7feec7d551f3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.115.161']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4887db-e87f-4a61-83ef-95be318e9cd2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.127.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ee9af2-4a9c-4158-a85f-6d3929bfa876", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.71.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a5a396-be45-4c33-8014-0aa7bd55d096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.45.6.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a273bd15-c24f-471b-b1a3-75884be038bc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.214.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc6376e-a016-440e-9026-0c717043d440", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.146.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbd3ff5-0e22-4beb-bc51-9de8dfc2f218", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.170.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37cb9c0-dd88-4107-9ae3-718942613016", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.21.168']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555f94fd-fe93-4d2b-b632-8716e8903433", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.255.200']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b28915-43ec-437e-90e1-e0c095fbfd60", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.77.244.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb79836-a6d0-47d0-bf3a-954576c95b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.199.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a26f70b-a394-43f0-9aad-2480d6da2500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92776e2-ab3b-4d7c-82c9-80140b4839a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3673ab3a-8a2d-4f8f-808d-bd1c5f7b622b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ea27c4-5f74-4846-91ae-417d362a4b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4670df1c-3c80-44bf-9b7b-d49f6926f45f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.86.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2127af5c-7b3b-4495-87b6-91ce6206e2e0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.99.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5e6ffa-acc5-4d90-a76e-9bf239ce9537", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.91.158.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3868ddd-b466-474f-b324-efce57f080be", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.91.97.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa55ecf6-d52c-4ae8-a5ec-0ca8aa2c84f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.101.73.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af9cecc-ad52-4899-9bf1-5f105bdfcf99", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.141.19.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9890a662-b4b5-4a41-89e6-853e99dcdd76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.21.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0858916a-9ef1-4802-a7b9-9e6f077b5df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.9.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56502c4-8a48-4851-b43c-35732c9cda54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.90.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8333a3a2-6a25-4fab-aaaf-4af08f239b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.93.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213bb3cb-2d56-4ea2-88ea-fa2604ace96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0719eb33-9d0f-4afb-a7d4-e62d34be0994", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7191a586-ad8c-4b1c-afaf-70c8460a6eb7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8525fbb4-d7c0-40a3-8bc2-ec604d67e241", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.180']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bad928-7426-43d5-acc5-6ef00bbcef87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.183']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32967721-7650-4f09-8067-730233856a1a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bccd38-8723-46d9-b162-936af3620e5c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905f1bd1-f6c1-403a-8b40-d20bef3dcb98", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c36bfd2-b766-424b-8710-ccc6b889791d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7224ec2-bfe6-4803-a8a7-712e1d8ff10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.145.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3eea6d1-af90-4d9c-a2ba-22df93a9bb97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.146.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb1fff7-c73b-41f7-b716-56dfa38c74e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.158.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf69b131-aa51-4ca8-a8ff-500ed48e0b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.189.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287d6873-e1af-46d8-b63b-715da9a59d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.191.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830d9380-41d1-4723-b041-d9ad8ad24417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f433ac-4149-42e5-a0fc-6bb8031cc7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.204.132.161']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfe9614-8f6d-4074-ae06-9ae71f65e002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.207.196.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183df936-5588-4ba9-be2f-b820eb17c0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.23.165.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7060622d-19fe-41e0-b840-337149884dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.23.168.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998c21c8-7d6c-4422-b727-8d8137a7925d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.230.100.152']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd0d8b3-5516-4005-8bfc-01dbd4ebca16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.40.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554a14f8-c56e-4b05-93e5-aa4329c1ea04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.7.83.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e0c715-94f4-407a-87f1-ca8a531d0001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.252.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4befa92c-785e-4e3c-bd3c-e49dcb55412c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.97.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01b8b1b-04ca-43dd-b938-69ecff669b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.151.196.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aaad201-d996-4a87-92c1-00a5a747ef49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.165.165.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b89df1-ab25-4dcd-ab7f-77fd5e630bc0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.205.144.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526876af-da3c-47de-b0c7-9a27a3922b60", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.205.66.13']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e325b0eb-2763-4cdb-954f-b27b43a2eb58", "name": "Malicious Host", "description": "Web exploits: php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656, CVE-2026-9198. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '54.207.136.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9198", "external_id": "CVE-2026-9198"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c127c9f1-f739-4ea3-9a25-26b61ed0953f", "relationship_type": "indicates", "source_ref": "indicator--e325b0eb-2763-4cdb-954f-b27b43a2eb58", "target_ref": "attack-pattern--711771cf-7c5e-4400-8a3f-98333c379d2b", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1aa0c91-df53-41e2-b3b8-755299d43c9f", "relationship_type": "indicates", "source_ref": "indicator--e325b0eb-2763-4cdb-954f-b27b43a2eb58", "target_ref": "vulnerability--c81e14e0-c6e8-4463-9ffb-b98b2c6a5160", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f24b894c-89dc-4171-b2dc-f19ac9e82543", "relationship_type": "indicates", "source_ref": "indicator--e325b0eb-2763-4cdb-954f-b27b43a2eb58", "target_ref": "vulnerability--ae9173a6-de5f-480e-9c65-11bbd60b77ad", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f480de37-e71e-4754-b289-8ce9285695dd", "relationship_type": "indicates", "source_ref": "indicator--e325b0eb-2763-4cdb-954f-b27b43a2eb58", "target_ref": "vulnerability--6438735d-4dc9-465f-aa37-42f44bbddec8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e23a281-603f-43c3-bfd7-7d767514af48", "relationship_type": "indicates", "source_ref": "indicator--e325b0eb-2763-4cdb-954f-b27b43a2eb58", "target_ref": "vulnerability--51fabef0-a353-4d32-b8ff-98e2d3756318", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5725c2c6-fe68-4862-8aa7-1625d9489cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.221.141.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f8e28c-41be-4afb-a965-ee1354426146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.236.38.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6653045-420b-4863-9586-21a9e7a56162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.243.13.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bfe32ba-9290-452c-b2d0-54444196dd9a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.37.227.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42624c57-7083-4511-aeb7-851bd382f9ae", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.38.180.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee792837-bd83-4623-b929-ed204b248b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.82.54.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1551cfab-19c0-4d9c-8dda-7918f83e0d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.83.95.119']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef0773e-386d-4367-b3f5-b6b64a246ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.90.247.162']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a36b047-bdf6-4036-8576-cf8d04b89471", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.129.12.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa815b8e-3c3b-454b-aead-78527f796732", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652e5a73-1981-42cf-8ed5-fd99a436b0ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2cc9e0-1950-47d6-8f5c-ea94e95f27bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf59366a-6790-4d15-84c5-7eaa978096da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045deb8b-207f-47bf-92c0-e58ea6d4a87f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a47f897-a68a-44f5-956b-bda33e01e88e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f888e3-0023-4be3-9cec-08fb8c34765b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de093cb4-17f9-4c4e-bd7d-9c76d028ca51", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af2718f-0f05-4d4c-b743-17f13817d357", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.147.171.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4a8a63-da69-452f-841e-2a278788817e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.215.186.186']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405aa2fb-70e2-40a1-bb82-122b13d12718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.50.199.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95ae006-5f93-4f10-b5e3-157071cd3062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.50.200.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c995f3-eeb4-4a4d-ad5b-c660301854e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.52.100.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04cd763b-b680-4531-8330-3f67572fe6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.54.32.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f0f951-24dc-4b56-a73a-5ba3603285e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.55.192.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78358121-073e-49e9-aafa-3157e1c936b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.76.159.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054af06f-9239-4900-b835-f25eb7d15406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.11.42.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cde8093-68d8-453d-9882-041320a46bc8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.120.178.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dfb7e1b-c6ec-41fe-9039-20d70e0b010e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.111.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a75000d-7d20-4b8a-9c3e-7ec08bdb6312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.194.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9cc7dd-d396-47b9-af2b-06dff9665071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.47.168']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7f8893-75c7-4d81-93c3-cf8c7671c4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.127.68.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79cb6c19-0175-4395-a7e3-fb220566053f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.153.220.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dcf43d9-88c5-4d9f-a449-53154adc63ad", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.180.152.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c933081-b6cb-4e53-96fe-c0cf5aa5d515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.47.190.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3687ebb2-64d1-4948-ac58-b54c7cfe9b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.194.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a15a6d-c183-4796-9a76-b198832150da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.198.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac2e2ac-d438-4d69-a04d-c2c2db2d742f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.215.23.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6641048f-06be-4332-88cc-0950fa7887c0", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.134.122.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900c98dd-304d-4d17-811e-8def8a7746cb", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.163.115.205']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aced0d5a-35b0-41d6-98c0-d111d94d241a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.169.202.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e985d3-be0f-4f91-a0ef-2e18d720c96e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.182.67.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e2a231-0ce3-46bf-92e9-7034be836545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.240.29.222']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30b86ee-e399-42c3-a945-7023f4fdf55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.49.60.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12530cfa-9716-4e9f-a8f7-021e8b963e59", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.73.27.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4fef336-7607-40b4-8311-75fb9491c855", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.76.38.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ab438c-b0e1-4361-acbd-b9697550f723", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.113.111.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c9ea21-92ae-444a-b343-a01eb01108ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.122.213.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9f7c0f-90a7-47df-ab7c-28485b03a278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.146.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57feca61-3d50-4854-8b09-dbceab5b7e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.147.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8fbf546-bd14-407f-9d81-ff7ba788e3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.169.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f822588e-1fad-43dd-a8d7-b94f2c1f061e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.9.33']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd8c0e8-3f19-4349-a002-ece5b8e1fa0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.142.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b6ae48-e216-4d7d-a752-54354c6e158b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.142.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec221804-b532-453c-955b-eb2ac1c17a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.198.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01b0eee-7575-456e-934d-0ac4d4901868", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97644fa-99ef-4f74-8b98-c1db4e58f443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffa404e-afa5-4339-81c4-406da16fc4e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798c081f-4c50-4224-aaf0-e11ec83ece57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a450655f-aa11-4f6a-a545-9f077aaa3e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec3447b-61d9-4f17-8708-4326384edac8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316f4e5c-d37c-40f2-a05f-11cbaf69c725", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '63.250.44.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e2eed9-d187-4fa8-9043-5f2d237cf239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.146.163']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97da8d5-9327-42ed-b06e-0b22c7effe33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.150.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8ef28c-11b3-4595-a88b-8f29e5c0546f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.160.35']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53239c1a-4e7b-4dbb-9d24-41e096cfc959", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.20.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c273186a-2d0d-4be3-8dd7-b0a65201cb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.59.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a708a489-46da-4c60-a76c-16dfb380943a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.153.176']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9cc0f05-9817-457e-ae71-bd762cddd22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.217.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965c0b59-dd94-4341-86ee-8db56427654a", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cea9706-d702-41aa-b213-523dec55be0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.101']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d55c59b-624f-4ec2-b8a8-6a84fc1cbfcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.103']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3738f7e-5de1-455d-8a85-cd9ee070131a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660b0c9d-5f6b-4474-ad2b-15d42ce6b99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b0d7c2-e765-4773-b7fd-58bb845529d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439151ef-3d44-4d83-abf7-f720757ca10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403dbaea-b10e-42d6-a098-b7d9045537cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f138803b-29dc-4076-9be6-3ece0da6e68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b424cf-17eb-43f1-9462-9aafeab10ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add56ffa-67d9-46a7-bcee-0cc75101b505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d303a79-8f01-4ced-abe4-257f1b77e524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b192d877-3d08-4565-80db-ae6e9b8e21ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d7f69f-950c-431c-bc71-516e848b8bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6e6551-6505-46c4-b2d4-0e2138f58a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.145']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e7ff93-3ccb-4d6c-9977-4cb5f05a94d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b06c76-cd53-4f2b-8fcd-bf3fedf950e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30752bea-1f83-439c-b14c-151a3ebee534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd8ea5b-8c4d-4b94-97e3-3f2b3c5a7bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9358ee2b-27fd-4be5-a120-3de008272aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6d5b81-6fea-4653-a210-80867027720f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.156']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc8890d-c278-4cfd-8c04-7eb60d974bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.160']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391ddff1-0862-42a1-9844-2eb53dd27245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e7149f-19bb-4a3f-93c2-fb3ec1e5b5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.164']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bafe004-547d-4733-b92f-d2dcdec816bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee130460-9130-4a58-94ea-f0f69ad14172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a115af-769f-4dbe-846e-01a3cbc291ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6cc171-481d-410a-baa9-eaf266527fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1669667-8250-40db-9ca9-3e31b4ef6a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eda5d70-9e5c-4632-ac26-483d6a4b9980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4125d0-ba51-4823-a8d5-8b9e78645d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.183']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c5bd89-e1f2-4804-91de-847bbed7e60a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07a743c-411a-4977-80ce-6c4d03e02e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.186']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb05ac21-4a8e-410f-8d22-f9cf226feead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11321c0-cc1e-4158-9072-53dc408c5d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0cc3666-bdce-468e-b973-dab961a0769f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470af2d0-d3cd-4a93-9c50-ee0d6c835444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0f7687-5977-491e-b322-bd11e997eb6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21544e3e-b850-4f34-97b3-9b49318edc27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.200']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e3e964-8cb4-4c20-b74d-0ea1c2ddf17d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19bd1e6b-63c9-4e51-ae61-f9fe0d65df82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb78a3b1-3f2f-48ed-a7e8-31c1d3908cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004d7851-a9d2-4969-a173-73b3ccaee8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3da2a5-313a-4381-afbc-4792e3f49921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80d96ad-aa96-4753-804f-9e75254f9ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63f01d3-833b-4a00-ad93-01135e0319c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8363d679-e933-413d-aa1c-0c8a6bad0ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e26e806-c87e-4dd6-a19e-b8cc292f42d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96b2b4d-0fb8-46b0-8bf9-c217ecc37d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f134f646-4d6f-4008-9c5c-6729275095c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32895fe-5b61-4ae0-ae9a-4379919ece9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b6276b-b649-4475-a352-da0da783d419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6224ae-f961-4897-b65e-66161dcfed86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc679f2-3808-45a6-927e-c14ba9688009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390f94c9-68c4-457a-bc29-ecf3b36b3dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba6ef43-85b5-4666-bf33-70541f5e97c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b0d936-f734-4bca-8cf7-80b04963c6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dec3cf9-8b0c-44ed-9cc9-3f9e0be7f738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fecb1f54-9875-42ed-a880-8f6766a46cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334e1028-58a9-4b70-a9ec-174ed29050fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c64e1b-fa50-4ded-b7f0-61966f298861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68007b58-2b13-4ea5-9ef3-df126b6400e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47aa075-dd8b-4045-ba1b-d86c71d12b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbf4ada-a2b6-4a95-bc53-f6fc54a7c5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431cc3a6-7709-45ed-81bc-9dcebbe8a85c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae51d97-1be1-4d0f-bf6c-2f0a1ebd0380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3084b4-27da-432e-80b3-8b2712eda2dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5444567-876e-4a01-bdc6-1520c7422e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12daa5a8-3c1d-4797-b90a-6d1dfa548b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.62']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54334a21-890f-49de-aae6-e7cbf599e02d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.63']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f22329c-592a-4843-93af-e2f447081d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352a0a7e-c2a1-4624-93bc-e9bd079c857f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fbadbf-7db7-4258-889a-49d7edc6ae68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d35ace-2f3e-4806-bc1e-fd25c4c73e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607b1f32-1f69-405a-b1d6-5b41d2274d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06cbec9-5614-4169-a638-186823441f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588681d8-c1d5-45f9-a8a1-f5aefed3a20d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923348c9-c616-436d-9405-8208da4810ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923b6afe-93bc-4b49-8c0e-64d3bdb11484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f1d27a-8108-4066-883c-ba9397f5b759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce837717-7342-4719-8ed3-ce2401b64bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9189f90-976a-4c7b-9104-ba28ef1df1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c851c88-9e56-46ad-a1b6-559df711c894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3b6a01-a1db-492d-9ef3-ab3271b76359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ae93e1-aa41-41b7-b7f7-f2713ab3c8db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4272dac4-eccf-4474-a072-56c318bdcecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1632089-d19e-4725-b83a-bc07893a1488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.144']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ace024a-2299-4f81-b07d-9d65c772474b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed94d17-2caf-4ac7-a6ea-4ddffc92da84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c4e488-7bda-4dd4-a254-eb3f29a40b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.162']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c18338-d069-48bc-847b-7696399086a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18e8ea5-769f-4a10-affc-59066575ad8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04109964-cc75-4e58-8d8c-b65fa8b98d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8819237d-a478-4e62-a8c0-ed655d147276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.183']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689caa65-61e2-45a2-8493-18c49205f88c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db39e921-af86-4039-bd4e-7335e21c3596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0cb334-85c7-4fdd-8051-380b91584c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab96fea-1d5a-437a-887f-4ee118367937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f154bc11-f7fc-4537-a207-891e424c4e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0b24e7-d380-451a-9520-537f12d3ba66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a96a40f-b9c4-49fd-bff3-02dc6ea81aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cab0a14-ed76-43fc-a4f6-93896e60c507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94977cb8-d784-473d-adb6-36369a7bd241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.214']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36474e2d-830d-4243-95c2-c6490b1a4783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a614ad-f3c7-405d-aa30-9462f08f9624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38cbf58-4dc9-42f0-b633-dd4f38c14280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af33a5e-1851-4a24-b142-95b3c19a753c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.229']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66a2976-f7ba-4590-b4f6-480b2cb7c7db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a23076-ed49-41df-bd97-0f789187338e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57fd00e-12f9-4935-a741-cd9470741018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdce5f5-fbaf-4a00-a93c-d3e0fc2df336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479ab558-4e35-42fb-960b-f92b122bef7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a337010-ffe2-4536-8b54-a77e153e4673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74a417c-2ef9-4c54-bffa-e69f295e80dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6bc3645-79ca-4bef-989a-632f4b61856a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2cf4012-7f51-47b8-8976-d6c931101dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.4']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b134a23-61cf-4633-895a-cc09154624d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd5685c-5708-491e-8d5a-6b26bbd90c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937d7b4a-ddd8-4b9e-8047-bd4deb44a47c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9389b52-9b06-4080-9e21-3df727a5e247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decc2e97-2ba3-448b-9325-f885a48151d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a5cb50-c7b4-4192-b671-f166b6dfd255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5078f198-2e77-41bf-86de-564f669710e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95be3a13-5a8a-4311-8547-3f899e2c28f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3feca1d-8dfe-421d-b3ed-6b60db5f787a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30fc763f-d763-4452-9414-429ff9e95eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4ec792-7fa2-46d3-a8ee-35dc3450d3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d51685b3-4151-469f-8f0f-7da9457da651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77228d60-2680-4f32-a16b-a6d343ff5469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.71.164.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a61c71b-0041-42ce-aaec-1c90360f522c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.76.8.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20efaf2-a6e8-4859-93ea-e94b645f216a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98dacbf-aff2-47f4-91a7-5bbcbfd23684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2f74cf-97be-4ffe-9adc-1db6c9ab1af5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.160']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5d6efd-4647-4bf5-9332-db558aee6642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f7ded0-ab82-44b3-a06b-7547f1af40eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.142']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219b8812-4562-440e-8e6e-6c2fd62d6107", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.143']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9862f576-59a9-41fe-8bf4-f130327184bc", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.153']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284392d3-6bc5-4d62-8246-53fc9d9d6184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.154']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e675c34-d49d-4d3a-a25c-667703b7aba1", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.158']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2ba5e5-cc72-4f6d-9644-1f627cfb2f94", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70a6930-ad0b-4530-adc0-8d494e41d3ce", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02c8be8-88bc-429b-b736-f6b7db2dc102", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.176']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e872eb-ee85-4f67-94fa-f65093c41d6d", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1065e197-ee49-4486-a392-dd929b214d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd542487-0149-4d6d-8543-c9d2d5968cbc", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0df344b-5dd8-4431-9acc-bc36bed5160e", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.80']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd5bed8-4716-46b6-9e9b-bd0a6de0c4f3", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa607a04-4a9b-4461-8603-0eabacba54d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3448f970-657e-4739-8f83-966795216362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43b5321-d16b-43a2-a6a9-515333fd8ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc85129-fa60-452c-9fe2-5d5b27351a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.108']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549b9064-a0cd-4f1e-82a5-7c74beb3bff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0222ee52-39ee-46c5-b06b-f47d4c9f373e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3db5d1-82d5-4938-b0f0-e1bccd1f4be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e55f8e9-4b15-4155-ac68-4b5f846b8ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf9c9e5-b6c4-4071-9a3e-2c431fab31be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d5e624-c8d8-4d4e-bf4e-f106f523cf78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6493d386-8b6f-4aa6-acd9-77da3184860a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37d87b3-97b4-4847-b59b-733a30113a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbdc81b-ade6-4973-ba13-79dbc7686459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a47b05-18ed-41f6-a58b-ca5cb7b3e3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272eef38-48d3-4526-99fd-b7409d29f917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb681479-3fc2-434c-8309-4df21a9de440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a11177-0578-472b-ba9a-a705373d04a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b70788-0a68-4ab6-8153-ac72265c72fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386a63e9-f869-49b6-86e1-f8003d78d8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.143']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550b75e5-b7b2-4065-997e-16ac7d26b383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ce982c-707d-4870-8610-9679295d65d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99827115-4925-4002-879a-1eb501c118dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb0dafd-09a5-4b93-b76f-408c055462d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7329f9cd-b701-4837-8f2d-71cc0fd0c919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b7d436-b548-4e14-8d4c-baef1de2a0bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1cdc40-55c7-48f9-9f97-55d3e0c90c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed32a3f6-710a-4f6a-9271-560b42ab044b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d987b0be-afc9-4333-99b8-66be045071ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a6e966-850c-4077-893c-27d42447fdc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c23e79-7a03-4b0a-830a-137b0e319a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb493d61-1ac6-4e1f-81b5-873b5bc9e0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.180']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e02ab43-aa89-4e1b-8e70-a402e8a268d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390b81a7-1b32-4656-b905-ee5aad457f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13003c66-c09a-4517-8874-ca1ea9ba94da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11626be9-9cc7-4995-a013-b9dbbcb4347b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effff7db-ba7d-475a-b86b-d54c1020e938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57938035-58f0-4648-873e-b3f3ee605b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec186a6-7a74-4ab2-a524-0f3fd97255d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74bd53c-4709-4c20-b270-fa6409530221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b0bab8-d6c0-49ec-bb3e-9e2d9a10b3e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053f87bd-aa8c-4a98-b3f6-f6522c4f6e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabb5c7b-0321-4cea-8cad-a8ace08b18a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d6807b-a418-4093-8ddc-25eaae073d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac300f4-dadd-4ef2-a008-9760a7931f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ef53c9-efc0-4465-89ca-3dac62144d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf24a234-3d97-4ac8-b283-e8a1d6c5e8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d77d04c-e97f-4e9b-8d1b-af6caba43788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.216']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e34e7c5-4062-4925-a3f1-07b70d2dca46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d39fa4-877d-488a-aeea-5462e6e6c703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.222']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51918d7-4f28-4a2a-b0e7-8d82ca6ef0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a9b13a-1e19-44af-9065-81755290df1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c65ab4-9a1a-42b2-aaa5-e66213511a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d19859-3cf7-45ac-8219-e8c562935f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3dce7b-630b-4e91-abfc-3af6f21143d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a7101e-f569-4706-850f-2a2d6a8d54bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.235']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920f6290-0b4c-46aa-8f98-a3bdce192a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f36ab67-bb2f-4ea5-9dc1-e37d166b2e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3282a638-3e7a-42d1-9d7b-2fd3bb8a7545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa9315c-0db8-4d9f-9961-8a8fd11db128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53eded09-c88e-4b13-92fd-2f200361912c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7902f06-dbbe-4b99-a38c-6ef821957fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657f1029-b478-475a-ad8b-8ca171e2c16a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626528a0-5bf1-41a3-b71f-9d7a07383150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3473d3-769c-4a91-918c-44ca8639cba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef3f11c-c271-4d94-b8ed-0cc45ecf852e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb4224f-b561-4899-94b0-5d625251c675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3856b56-4362-468a-a669-9d9a6a6ede86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08bd00d2-181a-4058-91f7-03f1496114a0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.80']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab76911-006e-4946-822b-3e283d562ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b939ed8-72d6-482c-aea9-fedaff2e2731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6add18-2bb3-48fa-883b-c2edb0ddcfe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ee318c-257c-43f6-b14f-0a613a6a75ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.103']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61164f04-ad4d-4d6f-ab7e-194f869b29af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314e96ac-8c73-4df3-9170-0022be8dd673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6deff517-797b-4de3-980a-5eeefd37f17c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391ea1b5-8f1c-4b30-a291-2cdaec48ed56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19bd5c1a-3e77-4624-913d-47d153ccfa02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd43ce4-9786-41bb-b8d3-2270d7944e69", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6282d2b1-2319-4312-b4db-9a355767e51d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89cf3954-aad6-4436-a281-cc99e315afdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c816b181-98f0-4dd4-8016-3aba3ee293b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f511f5-ceba-4d5c-bf76-278503106f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966142c7-e5ed-48fe-90f1-94de5d18f9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aef4e02-2a37-4008-92b9-a49b8fc5bc28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0f0754-7348-4e3d-8b86-b8b5a7863ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e34e5d-e08b-4676-b138-4152880f38df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1335850-774e-41cf-a611-cab2415abab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.90']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b833fc-7191-496a-8ae4-b1ed8d68313d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6351cf-1d92-4234-9fb6-2a9d107ba283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.95']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149135e1-3b03-420d-8be9-9e163c0cde7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b44a53-fd7c-40da-a27b-4a7caf6e3f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1dd4139-76b6-481e-b1c2-d71487264b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.54.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e2659e-4437-4e6c-956e-b9deca50ea46", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.116.243.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6cb006-09eb-4e6b-bd86-63812541d39a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.118.148.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e35723-f834-4132-b1ef-ccd5cb764bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a0aae1-9a2f-47c1-a480-13d122ff14a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7811f2c-5e2b-44a0-81ec-73a0649a0b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99e4424-ece2-4036-ae5e-7f3f1a90d905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798ca11f-015c-4077-a65e-3f7ae8f901ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcfd6cf2-aecb-4fab-86db-b22b8266fe2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bced542-7af8-4700-9488-9776216695f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430de068-3316-4ae4-be50-d15fc050fac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f55feb-ece3-4f87-a396-56d119b524c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd846b1f-104d-473b-805a-7c053614c5dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380bcb56-04e0-4011-ad9f-05e60c2d829e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f038e5f-3634-44a1-8917-6a2639d45a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad8323aa-ca85-4e46-9305-bd6f0fde1664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4669b241-1d36-41f4-a340-f9739d777e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd751f0-a335-4cf6-a86f-63b01625cd02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fed2aff-8141-4bb3-ab9c-cb69b370dc2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8b7cfb-ba08-474e-90b9-152c3538628d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e668b1-b08e-4896-bb1e-071b1b91ec38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff57d698-d79e-4d12-9fbf-02039b5fec11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b2120f-83c0-48a4-923a-ee7dc6c61729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c20094-8dd4-471c-a116-f65da7edb00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6534b621-6fd6-4dbe-bb43-9fea925ad8d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc7b465-9fdd-4566-a09b-a9fe560fdcdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad40475c-ea52-47e6-a513-40920755e2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f267e2-656d-4538-8526-21f2d3e6c084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5913c96d-46f3-4402-8afd-620dad7e24be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795acb28-09d6-4fae-8152-323722bcf78e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ecfdb8-1dd4-48f8-8282-cb75b44b8108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276a19f9-8925-4570-b739-030611d8ed17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93d86da-ae4d-4c3d-a0e3-73190dcca66c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4527c4-3a73-4c45-89fc-8a8bcba741bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a2c3c5-b948-4535-850e-67dc6c8ea15c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f704a9-6baa-4c50-9277-8ac3d6b7e22f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c584d69b-78c8-48ad-bf8a-e3777f5860b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f79f54f-8525-48a0-a8f3-afe35aa47b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5d76ec-6661-4d05-a44b-91b9ca23a428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6e163b-9615-437e-bb69-ef127d3d7367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0affc611-5b6c-4019-886b-f11263db9491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff6ffac-ae76-4a9b-9d33-8bb5d1824d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de65193-4bf2-4e9c-bd77-b2be6ca7d19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa2b8d5-f321-464a-91ce-dedce76d9afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42f245f-a757-4d8a-b569-65d915599636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03130b5a-59b9-4352-a8d6-c4cdc2611302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91999871-727f-4430-998e-cb6891fabe65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e34b2f1-fb84-4bd5-9768-959573638dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7636ae27-5140-467b-9118-b42f4bebe606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f736225-81b4-4cb7-8120-4f0cd23eeb2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73f317f-a460-429f-98e4-14213b4aacd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d395d028-03c0-4425-bc99-ca28797a7c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12264109-649c-4621-9bc3-9597b5b27242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c48a34-6f97-4cca-945f-e11ad2680984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4c3ae2-6f7f-4414-82a2-c1447de8b940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd025814-513e-437c-96c3-99dbb4b3ed96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90ee3a4-7e54-43dc-a43b-bed356b3993b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238b12fe-eec8-494f-bf64-cb9471cfb5b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51dd71c0-a570-4f03-9e20-b13d5c0aa4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263b48e2-480c-4601-9b37-7b535f4332fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317bef16-556b-458d-b389-80096018650d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cab3630-76d4-4303-a375-7de2c53c2c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c74c77-08eb-437a-915e-c4e1aab6682b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7e9bc4-cb6a-497b-8bab-91a9f6bf96e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620a6995-877a-457c-8104-f0d120b56323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9115c5-28f2-47e8-83c5-3432ee16ffb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c96c70-de34-4a82-9d59-e4d94d6a8bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84152da-bd6e-419a-91a5-277fb6a09dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e8852c-b465-40fc-904b-42e7a17a0199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1dd173f-95cb-4a19-ba42-28e78337a3ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4815978d-c73a-4514-a409-50f3084bb46f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b288ed33-c941-4534-bb54-c593fa55d4c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f613d84a-4fe0-4ede-86e0-c264f368cf28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ffa374-b025-4122-8ba5-82d64bc7839f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbbe5a9-c3a5-44d1-902a-65bf4810b9fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eeb03c1-7ab2-4c77-be24-de2c74d50d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a292b1-308c-46bf-9445-5e5968fdd7cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5573a327-ac35-4762-8c02-855cbe75110c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff9b89a-a2e7-4130-97ca-0b5ec9f93657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b65cc5-553e-47ae-b4ba-f64c9dcc7f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad21e5e-3c66-4724-b039-f56364879a96", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5fb907-7fe7-43dd-b3c7-19f4748f9734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6222e0f-5a8d-41fc-a252-bd072f4a30ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cb536f-cc68-45a2-ae2e-0375239a97bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc9eef7-fcdd-46be-8416-3fdf5f1ecc21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb55553-21b5-445c-be87-85a989ec56c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4acd11ed-1f1a-47f2-aa16-b7ab9b00ce68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718ff6d2-c2d4-4f28-b13c-2d1451a24a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2226f3c-a496-417a-9812-1c2562eb8d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7665e239-1a1c-4644-b77a-846ed9842571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c1d3b1-6fba-466c-95ea-bb508a27afd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c370463d-5830-4f5a-8874-15bf98dd7b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d97ea4-b0d2-47df-a0ae-f7798bbc4408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afdff287-f41d-4f59-ae4e-9d74ea5255f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389fa4a7-4ff7-47ff-83f9-583ff396598d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0bc9186-84c7-41a6-a19e-21f440357fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1507a536-9108-43d6-b04f-9c251d0ffcd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11eace00-bd5b-46b9-b1c0-ffa2f2046810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c637d5-8a79-4221-a937-3f790c3db6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c779913f-0a7a-4e90-a905-101e154fcb02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffc1072-f1bc-46fa-854d-7f994a805fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ffb065-25a4-47cb-9d3f-bc7a3fa5fb93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b40305-852e-4abd-82a9-978caa58bcb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2a4e54-5822-4951-a252-3fdab47ad462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c41ea9c-081b-43fa-b906-bca490119045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61839a62-0a63-4e7a-94d8-4d8e0841faea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a298461-bd63-4b6b-8ad8-33a865c5753a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0d13c2-e994-495f-a098-435c2f75808b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42762cc8-e4f9-467b-895b-c251b89df94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc370ae-6b55-4610-a77d-bdbf457d1d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821bf446-6f8b-4ccc-ad37-1da9e251f1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb9f089-c9dd-4bd2-95d2-3134815e67d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41210b88-b7b3-4fe3-9a29-4e3073a6057b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ccea86-de2d-445c-ab8a-70ea1d9e088f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3798eaa7-3a17-4402-a89f-243fb3b04a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d356212-a16d-488f-b2a4-febad2093cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19835d2d-e6e0-40ec-8d4b-9af6fe190872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab78343-4ced-4389-ad61-f8faedce1580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c41881c3-7c17-4951-a500-b9b3307b8fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897c21c3-7cf4-4083-afa3-7da202d06a70", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a772f6-6eca-4a56-9ae1-aaab13699f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18426f91-7f79-4a48-84c2-71761fe321ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97475b8-56ef-4feb-8fc0-fb0907d8e1ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2698deec-6112-490c-84d1-6e1b7e61c252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e15a247-a11e-4000-afdb-d8df647ff651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2899c781-9ee0-4bd7-ade9-d1ba41bb7962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6319aab-4314-4005-b38e-e906d76f4a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a07e476-08d5-4543-8e2c-f037f9bb52e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc667e0-5da2-44a6-adbe-2202d8584e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d70467-1156-4463-8020-301a694979c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9431c0f3-3875-47fe-9987-232e4514500d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae0b87f-0a1d-47ba-b262-5dce7f531b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.144']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89c38f8-68d1-465d-b21c-4af26d186e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c054d9-a047-49b1-bdd3-1e62e8a95293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71de403f-edb5-4893-b2ba-57f02ecda141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ccb560e-67cf-4f5b-9301-8421d774d5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae5b083-ea81-4d90-8efb-5b039dc2fe5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e3a6f8-064e-493d-a7d3-dab9eb626e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7955c429-8cd7-4fee-b940-a84937348419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be8ccd9-8904-459e-81df-f7a32baa401f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27550417-edcc-47b1-b0b0-8b558419e63b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538b3159-39e6-4274-863f-7063175b354c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b926b5-0a5b-483d-b384-1769db8b87cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bea477d-a93e-46d8-bd7c-1699ad0663d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb19c7a-d088-4154-9f96-9b43cae74484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8696100c-547c-4c03-bafe-05af4c8be3af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9577fece-5aea-4c92-a0b9-f4e7342ceca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c78a996-d2d8-48b3-be9f-9f8630a649e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03156b31-cb8f-4709-87fe-9111ee257f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac865f3-73b9-4b37-ac98-f9b29ecf07b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f341edda-b14c-4534-9527-53e55446a020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba333b56-8a8b-4eac-8ca4-c95a049e7910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e562b7-ae9a-4794-9795-41fcf9d24f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a4fa0d-d96a-497f-81df-0b39079beae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e721b62d-17bd-46cc-9cbe-e17f9ddca0c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60cc4322-eb87-480e-b1ef-ea73a35fdfe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea28b1f-f09a-459e-8ac1-0e3bc8ffbf61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b5764a7-99a7-417a-ad9d-70e52e588cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e1cd8d-f7e2-46de-b144-ab8cd32843ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71db76ef-a04e-4174-b096-66cba6333254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1dd5aa-ef9c-4f24-91dd-21c8a3ebcb30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31a4392-fb5f-4adb-8a06-6418b1cee6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a156b2-d0f2-4d0c-880a-b750a3b11085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ca57b3-fd3b-41a3-b0d8-9931f2b04aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.90']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66436832-a2b9-47a4-9782-b8d94dde2b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ffdcf7-49af-4a33-8f86-a42723dc1ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa5107d-cd17-4d95-9444-091cc2f75567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd45c24-43e1-4e0f-894f-37c1ca68889f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b71d059-28ee-45af-82ce-d5848c069f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708a2beb-5de3-4f18-985f-012413c9e0bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbaab5ee-f7c5-45d0-97c6-ae935779dffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e56fc0-b715-4970-85ca-9a8641054e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7934bdc3-8e94-41bd-ae40-8b2257f76d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34fde51-0288-477f-b5fc-ba3649659c60", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623cc92b-df0a-462c-95b1-42a6e06cfa73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78055e5a-5e27-42d4-af15-6540a798f5c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ecf622-04fb-44bf-891b-abec62ca7f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48021a9c-6819-4a5e-a11d-bf494a475712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b3d25e-6baf-47f4-8868-30317bb4a052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf2b0ac-b92e-483b-868f-c18b62e4faa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.150.198.186']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85637729-bf94-46e5-9137-291e872b7672", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.154.115.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c86d90-b52f-4f74-8da9-e1d24c46961e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.165.247.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0da3c8a-535b-4dc0-b5df-1b10e1c0f664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.215.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fd4b08-5b72-43f7-9533-62542d590c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.215.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27d7573-c862-4689-8d8a-a1824158d9e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332bce73-7981-402a-84c6-baf6fb601eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.10.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8808a7e-1e71-4d8b-a949-0c47690d6294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374271fd-1697-4813-9138-33d98d1487c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.176']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a199329-9325-4f59-aaaa-0487d5f37e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9fdacc-7db5-4356-a883-b5f3e2d25b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.43.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241b7662-0e39-4ab6-9825-b277c9e631c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.43.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7997357-825d-44de-8bd7-86763b39e3a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7704128d-c298-4287-8992-293e1d25ee5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ae757f-1ab6-4cc1-8114-75d871916be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c01015-0718-4102-b417-94504990801b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e635102f-2db2-4a62-8c41-28016de96efa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.65.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce350ea3-a618-42ad-ad52-01653bade662", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.65.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6406d65c-4f97-4434-951b-affdbf3ebe0c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.74.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf55a12-8948-459a-96ca-3e40aa9a3ce3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.74.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7443b8-c720-4f63-bff7-28a4f237a18b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.29.157.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f3d0f5-13ca-4f04-a252-d6dd80760741", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.145.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b579279a-040b-4222-b26d-a3fea95cbd28", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.231.30.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d9be6b-369d-4e86-b481-7b6e2578c116", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.155.147.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473d7cd0-fa95-4531-aa4c-8487dfd5c08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.136.35']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0172d28b-689c-4641-bfa1-79be85f24f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.22.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71362d72-a2bf-4b99-92d4-934c7ac40413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd879cc-5e97-447c-ac41-2a6d3cc5ac7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.69.177.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0940247c-b230-4c25-bb43-94f209126040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.12.71.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c133253-0617-48ee-8b0f-b214b099cdd0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.160.39.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40def4c7-76c4-4b6c-805f-397f8e7dacdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2560cac-f564-4b1b-af96-117f938cae1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc90704-c440-470a-b6fe-f45dc4485d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c545a8f6-b93d-4025-99bf-19cb6716537d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89846b3-6013-4ad7-8c99-afd5b02091bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.62']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fa5a76-5f48-4232-84fb-5c0ffcbb4dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288f78be-9e0b-4e5e-a22c-d6b471bf2f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e21138-0097-4787-8bc2-0356e80aab12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a6fa78-3a21-4f65-8ea4-bdfc747b3a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18263c8-0659-4a1b-a319-a1d59126c446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58056498-d464-4270-b23f-a7fb80523707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8437a450-5e87-4576-b1a2-eab40175bd03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11b4f11-f9a8-4b5d-a23c-fcb9aca64474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96e4f18-3f5c-4def-a672-db16646b0834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3835fc3e-12d2-4864-b2c5-0a295ace50e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459b78ac-3203-4f03-b8ac-85b19f26f0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b90adf2-92cf-4376-b5af-3057c101a425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1997e658-1ea9-45c0-862c-40e9e461a915", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.7.63']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dacecea-e0be-48ce-99dc-5b20294edfd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.87.221.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df65bf7a-eb50-4f41-abd1-2e1c612ae9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.125.16.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9b0bf5-685a-41fe-a3bc-ebc718a2688e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9006d9-a6bc-4b28-9b3c-be1488332262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.229']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04f9e75-fa11-4cc6-9dd8-e080ea70d8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad766d6f-6e54-4f84-94f4-c6f82d971164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb1c290-217a-4718-9de4-c83072e1606d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.186']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b761e88-47cb-4878-ac2d-e3a7538cb1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0ca394-506b-4fc1-9cc7-e4d5799cc7d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a6a850-e15e-473b-8acb-fc6f443dd57a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2829035f-01aa-4c3f-9ba6-8004b78a2001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508723a7-b599-4cb5-86f0-55bfd8158033", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.18.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c42db7d-7e77-426b-934f-718656dee96c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.34.43.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12fc48d-ca15-4c16-ad8f-91049733b910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.241.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbdc953-15d9-44d7-bc6d-8f459988670f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13922580-6d42-4cd8-98ab-a64c756c475a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.122.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63efdec3-0ed7-41b6-89ac-5572ce624ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.184.174']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f48957-7f3e-4aed-ae6b-63dbcbfe1d47", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.248.24.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd769056-5f03-49e6-83ee-f0f9b621b52a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.248.96.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d9598e-e58b-48e8-a7a7-7c19eca27e0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.175.180']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ffb4101-81a9-411d-9c29-923052e590fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.241.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a338747c-22b3-41c5-86c9-d6e6987724f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.242.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f6913a-0b06-494d-8b36-e594a7b1f39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5dc7ed-ed5e-47b5-9b10-2de5ff1cfc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb45d084-366e-4543-abcf-657305e0913f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1b87dc-c091-47ac-ac98-9b46e21c2800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec78f66b-6456-46a6-aa73-26062a3ca5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fdac48-548a-4357-b059-a5c7b51a339c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5502e851-6384-4c23-bb63-c6d97d227cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f39b2d-947c-4402-b50b-cf0655ba54f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41ddc8e-b4a2-4f21-bd0a-1a45a5ce7b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f4f9e1-79e5-4c8a-b174-4912ce3f6fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1600958-ea57-45b2-bb00-85ec567d0174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5cbced-c0f6-4206-855c-5b5e179fb331", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.94.234.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d522b3a-06f9-42d3-8177-e0bca4b38f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.127.6.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc3eee4-b56e-41fc-af87-6920e535ee10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.169.240.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a34f3d-9279-4668-bcf0-37f30c578e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.185.131.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2784a6-8751-4504-8acd-854ee9a9b3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.168.175.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1def04-336e-44b7-a2ed-3935cec45628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9acc4a-d2bd-4658-a39b-7f659d762945", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52ef087-2ea2-4020-9562-47c400abbb9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2565e708-5f75-42d7-a6d4-a7724c2f273e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3284fe-d7d7-4a3c-b8dc-865b107d09b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19ad327-2cda-4bbc-b793-0c8226356fdd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.245.156.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999cca5f-ec96-4722-b76a-f257402bb9e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.29.43.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d95011-ce41-48ab-bc8f-c3ace6a79d00", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.42.17.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3201f079-ead1-457c-85ca-6ce9c1cbd3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.75.15.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f7641f-e2be-4360-917f-84e45a353834", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.240.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b015968-d63a-4f3d-81ad-ce2c3f46823c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.38.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cb0af1-9f5c-4838-b243-a823978bde6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db990c01-b435-4049-adcc-169c2d07e6bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d7f619-15d7-4c77-9a18-e4da35294b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.87.40.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c20070-0611-4c5a-a02a-bbdd772428ef", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6ebc4e-09fa-47db-a0c6-a345496566be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64dc29f7-5f8b-4b26-b205-931a922f9edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd523c6a-e24c-46ee-b3ec-4b480f21b1a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c26598-ec2d-495b-bab6-aa3cd8b00632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd2c46c-96df-4c15-bd2d-20f21d7491ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6faa988-1add-4b3e-a296-9b81f925e8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ffc5d1-57f4-4c6b-b945-c9d4cb574f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76acf0ca-467d-40ae-b7aa-77604f135570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5919228e-2878-4602-89ab-222b1795e386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb96ec0-fe3e-474a-b18b-33ab62795620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1bcc8e-31fc-4ac3-9225-ff57cce49c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac95f57-6335-41d1-a23f-0912e21f3846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.141.224.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0154c545-499b-49af-a3c5-93f9be9a7b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3398b1d-2950-424b-9088-d85a1830f97b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a86fe1-23de-4cd4-b644-6c2f5f787591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c0e5a6-91a0-4a09-870c-16b9b80f4b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.4.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a7f297-9920-4172-84bf-412ac7261ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.159.131.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c417f5fc-e708-420e-8681-aa5901323bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.169.216.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e691746-c0a6-4f83-ac86-8e9cf39079e3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.194.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b404adc9-1dec-4c91-893b-75f537e8aeb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.190.182.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a58503-d586-4084-84f1-c8d9644da04a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.24.181.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61fb11eb-c7c7-4bac-9d23-7a9a314a84c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2967e05-9ac7-481d-9c55-e559adc303cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b71f2f-f008-45bd-bb89-8a4bda661bde", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.136.140.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a77ade1-30d5-4abc-9885-9ffff795beb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.189.129.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc9b186-e185-45fa-8996-5d6f89819698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.252.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f705fb3-ff34-460b-a44b-c123327266ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb2d776-d42a-4abb-8a9a-6eeeca38d1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.114.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc6f61f-e881-4802-a706-0e5bd10885c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.208.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028316aa-4483-4a7d-9637-a47b127d6e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.231.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b300dd-6d91-4093-8ae8-7348ade50316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.231.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778eb521-f535-4026-a95a-a72ba8e14ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.70.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b61cc0-6c42-4236-89c8-d73542a8e2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.74.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4b3969-30f3-4f55-ae64-31b04a2e0c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.88.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481b199d-bf64-450d-af00-7c2289f0c63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.90.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238b77d6-bfcd-40e0-b84b-365a2c7bc305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.136.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3956431f-b28d-45fe-8d75-8af5d2a491b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.148.150']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6639ba7b-97af-4f3b-ae20-c3f2fe1cdc5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.149.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0a001a-9935-4c34-80ac-1e48229a4c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.15.33']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bed1d53-99f6-44b2-9c1e-c1d27df4d77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe35dd1-9fe7-4ae7-b410-36cfea93d139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed69b63-16d8-4763-a79b-fbc6c806a45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef90c213-9496-4137-a3c2-7b643c92d4ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1ef891-5df4-42e6-84fc-476ffd238561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.9.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29718ac0-b809-4da9-a85a-26a3b586ca61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3ed526-4f45-433c-81ed-7d0b69b06327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b6df2f-f7f8-4071-bdd6-8b2603ac915d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46902d84-cbca-4177-8b07-3708adcc2ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65631712-fab0-4830-9972-49536b4ee2b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88dc5be-7c3a-44b4-82fa-176e6bc42bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3c32dd-f12b-4eaf-82f9-58923cb7c777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffbae14-5475-48d0-8e10-b660414a5f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8015a79f-5b01-4682-83ee-87aa2e612fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8936cb0b-0ee5-48f0-bc11-a0598f1cf330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.108']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a571691e-407c-4985-b537-24ead94c38ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0071c8ac-e9ef-43d6-9615-d221321173a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f4de75-42b3-400c-b5f4-ac66d8eb73fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.176']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1627367b-2cb1-47db-87b1-87aa103fd9b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84deb8a9-baeb-4934-abb3-8448f7ae3ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368b2ef2-845a-4f46-9a49-d9c4839904d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b149ac4-da13-485f-b4eb-62590180e343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b90635-e465-424a-a883-cd502786f39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b9e8d4-b11c-431a-9e8f-ae047a47a1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760f2950-8563-46cc-8278-fbfdc2e8672f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408ed19c-3d5d-42f9-86f1-401231903229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57def00-2794-4626-96a0-ca35966bcb69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74f4f34-1760-46b9-8350-5fbe3d620f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4f7ce8-dd66-47e0-8cad-31d9358ab8bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9af5048-14bd-4101-8e30-b6ae7ade963d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd958ef8-1ab5-44ea-9354-d3467005116c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.132.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ff7414-2f9a-4058-90e2-e89a685df757", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149, CVE-2019-5418. Sensors: openclawglobal, revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '8.228.14.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:openclawglobal", "sensor:revproxy", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd31f6fa-bbad-4548-b398-d50a3f42b5bb", "relationship_type": "indicates", "source_ref": "indicator--d6ff7414-2f9a-4058-90e2-e89a685df757", "target_ref": "attack-pattern--2099f92e-22d5-4f56-830c-a0f433029f77", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70840c83-3235-4691-8500-42047c37666a", "relationship_type": "indicates", "source_ref": "indicator--d6ff7414-2f9a-4058-90e2-e89a685df757", "target_ref": "attack-pattern--711771cf-7c5e-4400-8a3f-98333c379d2b", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--584fdf1d-1e1a-4e96-b704-10684b27fb3c", "relationship_type": "indicates", "source_ref": "indicator--d6ff7414-2f9a-4058-90e2-e89a685df757", "target_ref": "attack-pattern--ccf3d1d2-e476-4ce7-bcdb-4aa7379c0125", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84ee6700-fa02-46ab-8dcd-f5614606dd32", "relationship_type": "indicates", "source_ref": "indicator--d6ff7414-2f9a-4058-90e2-e89a685df757", "target_ref": "vulnerability--c81e14e0-c6e8-4463-9ffb-b98b2c6a5160", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9c2fe5d-7474-49ae-886e-62dc32804d81", "relationship_type": "indicates", "source_ref": "indicator--d6ff7414-2f9a-4058-90e2-e89a685df757", "target_ref": "vulnerability--b4c1dece-ddb4-4491-80dc-4a235237b191", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4054fe7c-bc22-4713-8844-f60c33c89085", "relationship_type": "indicates", "source_ref": "indicator--d6ff7414-2f9a-4058-90e2-e89a685df757", "target_ref": "vulnerability--a2257583-2ae2-4920-8e5f-444787dcd26d", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0812a873-c6b2-45f5-be75-cab01c726523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.230.29.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7cc1ea-62df-4955-92f0-8b0cf04490c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.234.90.183']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbb66bd-b302-4551-b719-3c143083d74c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.211.236.216']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc183bd-4bfa-42f4-82ca-dd7d2a8d6c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.253.235.158']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca12e56-27b6-4086-9340-8a69956cd191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2dda56d-b0f7-4d05-8ed5-07df80455175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fd2972-0c89-4340-b4bc-3893d0a3925a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02f4f1a-741d-492c-b3b9-b0ebe1c0e8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31549610-c93b-40bd-846c-cecf6ce9405f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a8e368-bcac-4cad-a218-b345165288f3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c12c9cd-0a13-4e75-a76e-90c18c056823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b4947a-efcf-4182-9141-26c86887dfab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d0718d-5643-4a10-a2e9-0ad5d4992eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90247768-fa29-4433-881f-3951ebbb82ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c74ed5d-21cc-4a61-a5af-4396a293e551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb0c2b5-3aee-4259-b3b9-0e950d9fa81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36cb2434-5d7f-4b97-93a6-d52261b016b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.96.113.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1867c7-afa9-43b4-8ad9-9088c6d3085a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.97.124.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10caf74-341b-478a-9ea0-6e2b2446caa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.17.28.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3fb00a8-5259-4783-9d1a-4f1791551d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3028dbd0-2d81-4c74-93e0-c3c1ca94fd2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35cd9dec-1320-4345-b3fa-4ca092e63366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22053547-e15f-44ca-adc7-b3888a905ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f7b334-0e16-48bf-b20a-dd34e65e4e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee41560-a5f6-4b3e-b11b-39a72313c6a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059f90a5-c0a2-4070-adc0-6099570da735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc3d5d0-d1f6-4b8e-9917-ea95ef3f580e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784496f1-4376-46d4-a6ea-8d391cee700b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f47798f-b139-448a-aada-4730e0d89004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319b98d7-9df0-4173-9bfc-b107c6ee1a81", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.23.184.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0e0e4a-34d5-4813-baef-cbc0ad125a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.68.179.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf3c937-a457-4b53-a5db-37c37fb4c040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.180.146.1']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f44424-bb20-4286-ac82-4816a2fa0d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.200.252.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1bcb9b2-1e22-48b2-8d0a-257dce6f5b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.215.110.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f1b789-e433-4d22-9822-3d9dab81baaa", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.86.112.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a409010c-0400-4adb-b21f-ccd7d9ea16e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.217.213.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe20953-6a00-4ad8-b70d-83b6ed831bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.221.202.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd4567c-46de-4203-af29-e9aa1ba930ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.224.154.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6872278e-8d3c-4e64-8f7e-79bccaa35bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.239.71.222']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca28ea5b-5408-46e6-b18c-80845a7ed134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.28.54.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4d4b89-161f-4b91-bbc1-2d2b3740958a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.96.212.152']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72ae793-11a1-41e6-8123-c55d857d8b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.211.12.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5929f3ea-a8b6-4899-b466-84ec324b87d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.246.209.31']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cc071d-ec17-4946-8c64-d8fe58b128db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.26.75.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b2ffcd-73a3-4dd9-8699-868eedd104bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.65.51.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fee1485-c735-46f3-a7a3-95147418b434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16120e76-6f6c-4ba2-90d6-59017d9ff547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263a5c82-06d5-4420-bf84-97bd7e2fce2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f3ddb5-9136-4d39-bcdf-25054ee15648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.143.219.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4de7b6b-6850-4e0c-9a52-615190db00e6", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '85.204.70.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228612a9-261e-4800-bf34-36ac5c34b4e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63386da-3881-4663-849c-a9a5a4717aa4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0ce43c-0ea6-4ec5-869c-408bef8bc77e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64677ba4-e0a3-4945-89c8-4c7df17209fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fdd4349-b2e5-4062-b948-5eedaaa17db0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a924651f-1808-4aaa-891f-55a532d72473", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77e1cc9-7b10-4035-a3c3-70ca8468214b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89156838-70d1-477c-81ce-344a282de9d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e794773-56a2-43a0-8dfa-48483463d81e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de11ce64-a071-440e-aa9a-c0e552fc0e67", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3959c4-4100-4c5b-9e6b-ce8643157873", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a2c870-1e70-4c84-9096-4769ecc62f32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3f7b53-342f-4882-9da2-4d02516a9b32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e074d95-0299-436d-8475-419a297fe431", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8d5673-6e54-4d88-a1c3-57dc27c5f611", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ff0f9d-5339-41b4-aa2d-3677cec5a0f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d757dc1f-eb4d-4e1f-ab49-888e88e42089", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a80e7d-3f0e-422c-b245-33d6036b0861", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab11491-9647-4fb8-bd4a-c79eb0f9f34a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599ff886-95a8-42a3-9a61-50eb876a4923", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c5bd32-a0e6-4765-8ec8-f1ebc4e4a40c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb442c93-a6ea-4819-8028-3d3e771ce596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56eadbc6-b6e4-4a0a-8c34-c941d26ce62b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aadab1e8-2493-4623-9c99-d50e69832bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f3b04f-e686-4061-a401-3749e0047807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be28030-1379-49d7-a993-72ba05a0f07d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2781fc-387f-4efb-bfab-3d735dc00074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3b5e7e-2b2b-4fbf-b191-30bd9d958861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a1dc32-6ea4-47ee-9286-83badfbc2076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46d597e-df39-4c65-8492-0822d9d32d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6345fd-c8b7-4572-9b2d-0c785f420591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692c3e4a-3a78-4006-a9eb-f4431ba0d4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26742653-d153-4153-8e8e-b141efa4f2c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9851895f-7c7e-434a-a39b-1339bc35f4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b00c83-1e82-4ff1-a135-5693ddaf4397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb0132f-95c4-4d9c-abc9-c3c63c0e7b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725fbd84-7762-408f-9341-a8eebd92e142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88d5421-baa4-446d-9e5c-f54ccb74181b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e924776-88dc-43d0-ac82-33a781a874c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a48479-9f31-452d-912c-911d6ff84ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723031c7-5455-4357-9404-878aa8323e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.31']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f1f12b-1df0-4917-b6e8-aef8c9c535c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97dbd2fe-ccab-4884-af17-a01e0e4f11dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ed2e4c-62bb-4dbf-b573-7500b8690346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfec3a6-47fe-41ef-a28a-0e35a644c026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a507ccde-e6e7-424c-afc9-de2585c849e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3430b53-fbd6-4f76-a44b-4f0c0e18b7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28111d66-4dc8-460c-8cdb-1b1ef02d4d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b5ddcc-c0af-46b5-9a18-f397ea6d2daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.4']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e03bb8f-e2ed-4110-87a5-e48a5ea36656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e6b31c-a06b-4c16-b6c9-e434a5e89379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3fa7b8-3ac4-4d4e-adb8-97c1650d9406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b857cb19-a7ed-4606-a96e-8d84058c4348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe538479-a113-4afa-a8dc-d84be3b175cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77de915f-03fd-4758-b4ec-761cdae88310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ad6566-83b4-4a3f-90c9-a59c3e61278d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57707e95-a444-44a6-8348-8e5ec15e59b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606e97a3-c108-4fe7-89c8-0d642069bb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167b685b-f2ce-46e4-9814-9be280a32d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908b7e37-eebc-4c9e-aa14-8d24b61eb2b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1c0725-652a-46c6-ab2d-8300227d7550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86705db6-7d84-4000-bd9d-337488299ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1df7a5d-1f99-412b-b048-1ded2adb06b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859d2e5c-7e23-431c-93fb-bebb4dc4a01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13125563-99d7-407c-92d5-e9579d732b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3892684d-7afd-45e8-8c85-fb7a7959b0fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c25caa4-6cf3-480e-8a9e-f996ce4c23f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8e065a-0784-4f79-a7a8-288445d573a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b540787-2e05-4b75-813b-ad65267719dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b10393d-b629-4530-975e-bc7fbd20b655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e163ecef-cfad-44d3-9e49-ee1bb7d285d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e42f336-e8e4-4958-bd84-d7ba1df07b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b768f703-43e7-4345-a130-a6af0ca9ebeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe58fb1-7e4f-4514-868b-ac34ad95b3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1246f774-b727-4b6f-8088-da7eaee45dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747f544d-ad3d-43f2-9b39-235441ae2903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88e27c8-7d6b-47c6-a6e3-d980013a4a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4461e9c7-144c-4f24-b3aa-1c72532262de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.4']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c050860-06bc-45a6-a1d0-0be79b46924a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd87652-bb55-495e-aa81-98b2831dc654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04da5041-e420-4b0c-bb82-d741e4d7453a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b0283d-f19f-451c-95d1-c02629ca7566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671162a3-1ad7-4df9-be61-b582ff425644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0ed322-a094-4ddd-b4aa-35342104511d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72cd4be-034e-458e-a468-2ccce5f9c413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cab1286-ad61-4362-a13f-a422b847f8aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13df4492-276a-4b9d-9ad9-aba97ac01867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df9730e-460a-4f0f-88bf-035410b6ab11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74f3a1d-5aee-4c3e-9b9e-0e67d080cf4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2c97c0-50f8-4b68-a607-66f49eae5e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9441253d-1e20-48da-9fc9-36bf35feaba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65185a4-a806-4a6d-b289-e96c39358371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bcc7cdb-88dc-41af-ae75-3f5143975b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63254365-bd36-48b0-8e27-3bed4c0507dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c1f440-5269-43a0-8b80-9bd7808db8b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8559af51-af47-4751-bfb4-9498017591dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99dbe34-9a1d-4719-8efd-5cdbc0f22cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7da62e-4558-4773-88a8-17aa7fece205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b87e9ff-7c20-4191-b842-f43caed18965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98c9373-a14b-449e-a03d-247c9490ed1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.60']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f5add8-edbd-4570-b2f6-16b0023772bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93504b36-6f4d-4625-ad30-ee7647e3bb65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.62']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac0db8b-7b51-49b1-89d7-2b71929d55a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.63']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7308cc54-e6f7-4480-a7ba-df4fe6674746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd37f6c5-2bed-4a0f-987c-1f94c9701838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1156de32-f10a-413c-9ebc-12540f975845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa170b6-2f1f-433c-af3c-536da2797523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14234ff1-e177-4083-88b0-960e5d755afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45784bb-79a5-4bb8-ab19-70fd1639e754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e3b653-a3ca-46b2-88b9-3b2ffec35e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937b7e96-b104-486d-a34e-db7a3774ca84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b709f221-dd98-4653-8b16-0536cf3f649c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cff7a19-80f7-4cb9-835f-d8c5c3a3660d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289cd969-2383-45be-b9d8-26f5187b4669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e6c2fa-5c26-4026-b9df-835f1d3a94bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a30fd0-a970-4c48-8a76-5dddb4f94230", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.95.178.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d9f1e3-d927-4f91-9971-f3b380a30630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.23.208.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c0da33-496b-4005-9b97-703144a93c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.253.91.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2af3090-9239-4e92-b2ea-a6418ad54dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0412d5fd-1f63-469f-8c7c-af29b5ea302a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41903b8-fb31-4fa7-ae8c-b5bec90a6124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421ab847-2ceb-4b6a-987d-80c092bc59ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd92c8ae-20df-4878-bd64-9d11cac6addd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.47.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0580bdc-598e-403c-9fe4-3d1e953a73cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae5084e-0d29-414a-831c-e5d67eefd434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59a1c68-00f7-4b89-8ce3-a9314887f3a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c936a3b-1d80-4976-b023-e2ef0e741f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f250c6f-d43a-4568-86da-bd1bbe0be7f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.79.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71693df-aa03-4699-825d-99a3824be107", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.58.206.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19aacd39-c323-42f2-8840-ec15e1553cbe", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.58.210.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7073482b-cad1-46f6-914b-4e028cf0c28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.0']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89c6ae7-3195-41bc-96dc-8c6be5a4e538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.1']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f71799-7021-4610-85c5-5adc818102b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c3fa7c-1bfb-4637-a913-a4a609c0ae1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b98af03-158a-44a4-978c-85a52907dba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.101']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf1e15c-f10e-4396-8453-f42314dd847f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39bc931b-ac47-41e9-99f2-eb36a45e9586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.103']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebec5d0-4c03-49b7-9165-c0baf4cb40d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818b5a31-6dbe-4f30-af33-6ab628a1f9cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.105']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6410f8c6-b39d-44d6-9849-f38afe42ea20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74a9837-237a-40b9-bcf6-a356255aebc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd85eef-0098-4b1f-b13b-a490198a82bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.108']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851f61f4-6e57-4e89-8e8f-c7b1a1f5e146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f9f813-76f3-4f68-8c05-a1cc69a70222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4d9ee3-23bb-44d3-8da4-a82d1be30009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288d9ecc-e012-4729-87e8-c3092c9760e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c023df-6fef-449f-a031-cc04b78487ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90eddec7-9f39-443e-81b1-5855c1f0ebf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76470860-63b0-415d-a015-bd7b0e8d6347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b25874a-7d2a-48e0-8e75-f03400c59f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07f1d50-97c7-4dd8-82bd-45ac4b8ed24e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8365bcf-ca55-4c0b-8e57-be6f4d58c793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05a8624-aaf7-415b-a85a-4bd62e2648bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a676369-1ac9-40e1-9498-5e980261440f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.119']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc08a56-bbf8-4bc8-9ea8-7d77e6324e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece4b025-6a78-4602-87a0-e03507c6a4ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382a94e2-1679-411f-bf6f-e466f04f9c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d09c4c3-f612-4c2a-8935-16ab39d370f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a19d06-41ec-4353-85e0-d4691b5ed211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6db6943-c30e-4f1c-b0b4-aff6ecdb33fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7382963-1ac7-4be1-85be-a83e3af41fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58894e4c-d8ea-4625-adb7-8543108287de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb46e66-df80-49f7-bcf4-4ffbb71d3ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe66c8e-5b74-4f5f-a7fa-49f343f5f684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.13']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357c0ea4-38a5-4733-8f78-d11466d6670d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5864e3-add2-4e60-95e6-29e022cb56a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1344498d-13b9-4d31-91b6-1ad8a12c9a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23f9d13-aa2a-4207-a035-4b1d5c186232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9ac669-d71e-4f00-89ef-1d5404a74870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695d5333-558d-4864-be6c-55a1a74cefae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9b9688-4860-44b7-9bb5-e3639a43984b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7ecee5-b927-4e66-8539-ff5d1433eec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae2ac71-e815-4b81-a517-161e8d1884c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65000580-2709-4980-9373-6c5c6d75c104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6972f62e-db50-4cc3-8fdb-8fd9c721fba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96cd5bc5-d2dc-4ae2-9cc8-64e5fd7380c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5d1232-690a-4155-872d-41f3ba593696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53392de-0d7c-4b8e-8635-5e0f7325a0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.142']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72a34a9-3282-440d-babb-89ab0ff909e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.143']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3427a4-8215-431f-b86f-79a073a2ebdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.144']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e756c7-bdc3-4634-896d-7cba419b2ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.145']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5e9bca-c9da-44a2-a8d7-bbb96cfd6888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96cba06b-7179-4531-9bfd-d57aa6dc8464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.147']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18260245-3b01-4c8f-bc68-b3979b80524c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2edf82d2-fb2b-4489-8b94-b080a8b4c4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3a1a45-61f7-450e-8025-9a3b2d57c61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c957372-bbc1-434b-846d-16b8ef8ff542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.150']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30788a8-09c5-44d4-a958-1d9dbd69ec90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad21c52-04bc-48b0-a25e-7d4ca7e47d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.152']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83982e76-1bcc-4c26-8707-2ff6711eb7df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.153']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115afa46-e4ba-4496-9cf5-cc9f9145adc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.154']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c0a318-85b3-40d7-8064-23dcc1b49eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8610cc2-059e-4fd7-b240-2e3ba22712ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.156']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724f20ec-7d85-41dd-a047-fdc8dd94ddb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af029a67-5ff7-4c7b-bf1e-eb2dcaa9c991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.158']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b33f9e8-76ac-4be5-a6e2-2786885a1451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ccdc524-7ab1-4e6e-b107-bc5b6418f79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.160']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f81812-daac-4b8f-a15b-fa8c5d0f608f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.161']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96078f0-ee2a-4662-a5c4-710f158d4a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.162']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255ce190-b6f9-46e7-acf5-f1e9a85b015c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.163']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344589ca-3d12-40bd-9725-486a70ed3bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.164']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7fd300-c249-4c11-a3de-567dfc8109a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc84d3b-07b1-44c7-b0e0-94037549cfe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5675464-8749-43d2-b20b-23bc1fd5bfcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb7ca09-c4d1-467f-8cde-e279d897d33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534ea2bc-0f2b-4ce8-ba3b-06332098fb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885c5098-e5c2-4d39-a66d-5faf6bd5e525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23dd896e-2161-40af-8c66-39bf295b7396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc99f73f-6e90-4112-9fd2-39026ad8bff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c044d980-4b35-46b6-91c0-f704e4c09284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.174']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c04c480-c363-4524-a57e-aace0d788223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb149c57-a4d1-4450-8dd1-69b5fbae2d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.176']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e73c42e-85c3-4934-8c3b-21758ce043af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a5ed46-cca1-486b-ad54-0dac9020c2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2b8e42-d462-497c-aabe-38b8c8e3e726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b84b3f-702a-4f16-88a0-089eb9b8f73d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79df854-cd1e-49b9-bbd6-4e445c77f44e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.180']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290780b5-1a49-4800-aafd-71afd927a4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f08c2b-05cc-44d3-8eca-7d43f85b6517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.183']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285b2e7d-b875-414f-b6e6-9a368ebe427d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97353ff8-d604-4b20-b22f-51f276343589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63662a1-878e-4bd4-8a00-382767787bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.186']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141a98b9-7f84-4996-9f51-30915793b49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84190d5d-2779-4191-8b3f-dff3e1288bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33a963b-4d84-49ec-9ada-c28be5237e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4fc0ba2-3c50-4dfd-96fd-60c5bd4092d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97ab225-02af-4cfe-a597-e5881d7719f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664e2861-ec47-4290-bbbe-a71a1e842186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1443f4d-a6e8-456a-9d85-4836ebb3be65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027a1290-2c25-42c4-89f0-085277601c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5908db9d-adae-44b4-989a-44d043d2e26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029d032b-34d0-4440-82ec-02a7343f88a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe6ce6e-c398-4363-96d9-9ecf2f603496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a22658-fd45-4a40-abb8-7013b795ad51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f14049-ccca-4987-9b90-a807c60a5ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77d4e75-ab00-4204-ac7f-c7f213e5a5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed246ad5-1c1c-407f-8c12-caee2910dfa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b422ee-642e-4cf3-957d-e3f9372cde5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.200']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5470015e-43b6-4d09-8421-24804909914a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e531b6-4d67-4fd9-8abf-379166da64f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1262cd0-380f-40ab-9eeb-28aecbbd1f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac79102-924a-4b4e-acbb-f929534ac03e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968c2854-95e6-4622-9055-d5d35c5ac447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.205']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bed8b2e-3c36-42f8-8edf-1ed384023878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4f98d0-b71b-435d-ad8a-30909182f298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a6bf8e-23b9-4f82-83fc-dba9d399b61d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f10ca2-5c43-4226-865a-9c1d9090e38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82ae391-19ef-4d65-8c7e-32e2d3235510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbccc5c-81ed-4c08-88ac-0c18c991f1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefeddac-6ae2-4177-bdc3-9e2190154b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449fbfe6-107d-4b9e-b533-ccd53749cb4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc218ac-8550-454f-a0bc-6bb2c1ae62aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bde1c27-47b4-481d-bf07-9848448f9059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.214']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc108e1-50ae-465a-9d83-f4db7b98ed67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ec1bc5-162f-41f2-acbb-99068ec82169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.216']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7ff31d-1ea8-4e9a-82eb-74b995d109f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09fafe23-4269-4227-b7f8-7efd69a4d333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb53cef7-a8fc-4afd-82cd-0ba9c0bb6150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91de8c8-51a2-4563-8892-b974fc0ed9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3f6c6d-8450-4299-937b-444432f7ab22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccaa2082-17c3-4d26-bf20-f2c135493667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a156edb5-c931-49a3-906a-3c1e7423ddda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.222']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd1197b-4729-4fb2-923a-f6a06d43e8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41e5ccb-0a66-472d-8e13-2e21f729bc57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b51af6-f1dd-4d41-8034-797da16ef227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261a4d37-0dd8-4167-a38e-1ca39bdd51a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d06adf-de0c-4d90-ad18-247b526a0923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b16b3f-7e10-45a3-9e13-e5ae34b61790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.229']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31006281-220d-48b9-b616-c4bd94953be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e304f410-12a1-470b-a321-280b3d275af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2610a03a-32e9-4ad3-b3ee-4de98fd5e16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bf217d-43a1-4ec2-9aa0-8f0856988009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc420ff-66a2-4160-8fdd-8a8768971c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da137f58-6892-46bc-8a64-cd12ff5172c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7853e704-4f79-4680-9e1e-ae79e444c9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.235']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9f9a4c-1a1e-470f-a36e-29aaa9e75066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3d8924-001a-46a8-bd41-983b0da6b436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f13f6c-5279-4b73-a6ef-6c14ba993bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4c7cb6-9fd0-4aa6-a635-e2643e693788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b6b9b3-be1d-4373-b319-94890b2c8c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27b38d3-f95e-4e15-9e35-00494e26b8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d9d110-37f2-4447-9344-2cb579ce017f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.241']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397808ef-a280-4fbf-80fd-4ac99f5fa2dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7571405-3f40-4097-bbb2-6db8f52b65b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0c20aa-d84a-491d-9a32-51fa237f1ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4b17ee-975a-4088-9766-8983151c854d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e000bf-5630-46be-a517-3f66547fea85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e2e7c5-2e62-425a-8110-8558a92e588a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbc3eaa-9586-491f-aa6c-fcd198a628f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae8d9e4-3714-4bb5-a4b6-0a6b86a90492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb20625-3f68-48ec-b713-d557b9266cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23194056-ffc8-4377-ae4d-a2c5ee224202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d867ca-c804-45b4-a9c3-ffbc78d0d56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.252']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce89a1cf-22c9-43de-b69e-ed10d56701ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e69834-652a-4618-9aa5-26c0c587da94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7093a9ac-74b3-4665-9473-124cf9cf2f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.255']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2276dfb-d3b6-4946-8cfd-5fa6b80bce42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2323dfc0-b725-4799-a0b9-c28f75e24dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a05b6a9-eb00-4a40-9703-6f7bd8ccc898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8020a35-1138-4883-8de8-c1e11f0a5b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895f3248-22bf-4094-bfae-e4163075f8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806e6296-e15d-485a-939d-ee7052268780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6dc60ba-41dc-4be3-8449-2a4f3a639ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.33']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e0c8e2-1d07-4af3-b9c4-e22004c0e923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a6082e-a7b4-4902-827d-509b9c3c7d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29abbb4-c9dd-48b9-8750-e4b48eb2ae9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5187ad50-5bca-419c-9a92-065d75766a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ae4eef-dc2f-42c8-82a1-9446f1bdcae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.4']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781c3784-b11c-493b-9d2a-1dcdf8858690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a65d658-ee15-48dd-9107-6f9ecbd61b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a08f1f-ec2d-4150-9c2f-f86ce2939555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69324cd-e12b-4057-b21f-6d015e2de9cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9832a3-5fea-4c76-9515-af441a3150c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36278c9-5d24-46cd-a716-30ee01821c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb9b3e5-7bfb-4380-9e63-aac83f6ec832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb35392-ba8e-46c7-a259-54c85d3478a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07827e6e-69fe-470e-bc2e-dfc5aa01758f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058a754a-4c90-451e-8925-741742846fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d84639-d99c-458d-892d-60830dbd17c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3635188-3a13-4627-b3fe-4bca79eb00a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fee67c4-f2fc-4e0c-b25b-d9ca0b7ca448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ce7865-4eaf-4fe6-92d1-c710aa2b651e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7422bb59-6046-41b1-b0f5-12e8706f9003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5562a31-e5c3-4384-a7ff-74ccb04f728b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939e3401-2afc-42b9-9deb-aeca6b06a855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30c8904-fa29-4051-a093-fe5657a1e965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37391854-72b7-48a5-90fc-8d7103548139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195c8fd4-7be5-4592-8f93-13f9f63ebd38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.60']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63c4d79-e25d-49b1-8e1e-018c752eb37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e0f87b-d820-42a1-a232-3d41bb7c0999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.62']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1ec94b-efba-423a-9dfc-1d000d12bb47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.63']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe83147-8b3e-44da-bc7a-f0bfd9d7cc84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562d5479-df6f-4ddf-ac54-3948c8f793bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da01cb4-b120-4783-b9c2-8e399e9cf301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4e8f8a-730c-4ca0-affb-04e6f07ce79c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9288428-baad-41d6-8345-8e3dc61a093b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7deab8b5-521d-4489-a949-f20ef5a2f1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fcfd150-bed8-45b5-a25f-1a4154e18595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44159c43-404d-4142-b241-713962628027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1fba289-be0e-4a41-826d-bacdf5ed5f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a7c632-d2b1-43b2-81c0-e7d23a4f0481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe90eefd-e668-4ef3-8ce0-f998ff4a3cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c7663f-6476-4a81-99a0-67e247eec77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc75b9fa-3c77-4857-b853-671e2af7c535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e392b6e-ea52-4da0-9450-1519a4992645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179f2956-9003-41ab-87fe-e9096794606b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a3932f-cdb2-4e0a-9c46-fc73d61bf3f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4750fbb-d8d3-4eb7-9028-626eb74f8ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.80']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89183704-82b6-4439-b4f2-05de92215ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.81']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2211c79-fbb3-48ab-87ea-ff83a97dd66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c73e54-8c8b-4f62-859b-20219138f967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c97ee53-48d3-4d4b-ac9f-26b41a3d5b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49bef96f-4d15-4859-bc1a-2c80f5385ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b506ea4b-2f78-48fc-8508-cb9c32d0b56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe10db7-d922-4e07-93df-8574012331ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b870d49e-e958-49f3-bf7a-28e001de2800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.90']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62dc63c-a4de-498a-a02e-e6bd9cce34c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb1ddf8-74df-4317-8832-5e6b9c15b057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a9bc6c-1dde-4ef1-a2e4-acd5821c1a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104177e9-2db0-4bf9-bc5d-b8579bfadc82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c8d959-f93d-427c-9501-d2f3a538949e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.95']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bee4f05-fbfe-4716-97b4-9fa00b724a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984ff1f2-7464-46a9-8140-badbdc9a4af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a72bf7-f263-4d52-9c2e-993b105a2791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7bcd57-9fc3-4ab1-80ed-d1d9ac65ec08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.143.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f757883b-38b4-4f76-bc26-eb3aaa39111e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.198.2.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dac33b1-cbbc-4ba3-b45e-f55dc1eb25cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.250.219.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c2b866-6c43-4ea7-93f1-496a107cfa5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.189.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d7a8da-8d25-4b59-9d0c-09a744fde4f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.97.178.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943ac336-c0da-431f-9ddf-c7003d4b6482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.109.51.60']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd8948a-b333-4075-bc8e-f3898ce9b9ac", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.159.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508104b2-84c9-4d8f-a51f-03d1e99aa119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.142']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c577b7f-8979-482e-9eb4-f690a2590880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.145']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09197ba9-5247-44a5-951e-2a858df8f2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd722f1-ae48-4bcf-bd6c-755fbf209753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.222.108.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e237bca-b22f-4636-bfb4-896376c3f7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.223.69.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb67731-eaa4-4964-bc2c-d6ad67d2af6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.168']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1f8835-263a-4169-a47e-8e7e46302945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.165.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db22dfbc-e5ce-4998-90aa-68bb4fdae5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a914903a-e32b-4d41-a56a-9a3c266bbafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--addb7acc-077c-40c3-bfb2-2c982f656973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b5671b-e6fd-47bb-be00-2c7406e71b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6434e45c-0c27-4918-b2c7-29e6fa1fee1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a11e8c3-9bd2-4b47-a5f7-78201efb3acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d0d1f8-f80b-4c8b-ac54-d7ac39df2b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.28.48.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346f73e1-31c8-4ee1-b766-8f9358133f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5483c11e-9e27-47b1-986e-e3e1421fbf66", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89511ef-5a0a-4b74-a4c5-ecbbe32c4d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91bcae2-37c1-4a4f-8a4e-55c8564a4f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a775d7c-7469-4703-b987-349bd41ecc5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554af8b4-912d-4d53-8ca5-666fb0ac0572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acc04c6-84f0-413e-8ea5-ca183564f743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.153']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603eeee5-9d62-4dd2-9663-a9ba04b86717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.41.87.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a23a05f-184a-4508-bc9d-10165b75d48c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.168.115.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553ea5b3-f5ab-4a0f-a562-5079bffe11a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.189.142.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47819956-58cf-4600-ad88-332de6295a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.65.12.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a5f215-bbe4-4036-8068-b54991b438e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.84.231.142']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c844cb49-ed43-43d7-a185-4e5dfb970b63", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.94.200.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1152b7f-7c11-4bbe-828a-e339a6e0be28", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.193.174.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b64f3b3-500f-4121-9ea3-c73e207688e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d0f153-e626-4a54-b72c-3b57c2693dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efb2b18-41a3-4065-971e-160136c4dbe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583fb7c5-e39f-468d-aba6-ff67ff288f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ae8da2-6701-418a-992d-1f0d89cf02e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c181dcc8-84b7-4403-9a40-bb6cf4bdaa5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68514502-ee8f-4957-90a1-50b4925efd1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30a0941-3349-48d1-ba26-f451e7f64a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ff592f-bdad-4ee7-a767-d96f5db4e981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c738df8-3fdb-4c23-b469-1eff4a8b781c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b99708-b1fb-459e-814e-d019019cd3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad452d1-5744-4c36-841f-52aed606ad1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9707812-2845-48bc-ac52-ce956c04643d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be37461-fcf7-4918-ae6a-94728443d5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6016d803-c93e-41f5-9d05-315b9f42a195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.205']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72edc964-23cc-490c-a7a8-f708962b3d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62259c57-23ca-443c-b2fb-0d30e55bb438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d3e500-fac9-4e59-bc94-c9f90b93870f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef59ec5b-ad79-4b77-91bf-bf2ce120d16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4c3e17-ef48-4db8-8c00-b4fe9a4ae8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.235']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f022652-83b1-48fc-aae8-9526fd9afca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f60efe6-3789-4697-8dbb-91b2227f2863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674a4f59-4675-41b8-969c-80f29fcc225f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.241']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd36d3b-1b8b-431e-8e58-55b10bc16dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8782fa0-2ec8-448a-8b6c-21cdb9e44dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60a83d8-44ff-4967-b4ab-72fafe4c1a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e93f274-b51c-4d32-8e40-9d1f06620a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800bd01e-ba4b-4068-9256-4c8f92fdca87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a81b114-6fbb-42b5-aa82-ac4a162f66e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d16e8a5-46c1-4a53-a19d-314c8a988a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4e7a1a-d8c6-4ac3-9611-0028266eed3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb5f72b-ad37-4b8f-b63c-8e6249cdb482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ab2281-f6d7-43bb-805e-5eb09f90698e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10710e46-31bc-43aa-9d36-2d76ac0dea44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.206.19.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ba2fc9-0d85-46a0-bdb5-13f51554d095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.144.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fc2160-c712-4ff1-aa89-879a1cb2207b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.210.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8981ac-3adf-4afb-8d31-9bd96d9adbcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.218.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90116dd6-4952-4755-a76e-3a8480cad90f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.225.162.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ffb262-96a2-4de7-8c20-f0ab0b4b90d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff21a5c0-5147-48ac-9025-dbf3c29e515d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a571a2-f7d2-4c80-95d9-ce864ae7b4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b399a73-f955-4571-8558-eec3c0c951c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f0fa27-8bfc-442b-9b1f-b6176fa77b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e1ac6d-3a22-4e61-ab89-6b5190543455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86fa005-d665-4b8e-a383-2318403b56d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.163']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69218ff6-06b7-4bc9-b700-cc618e09e5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3d23dc-108f-4bc2-b649-756a307e67b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf01ee6-85d0-49d6-a424-64c1a0485ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea09489a-4425-47ef-90b7-1fdc058c1cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d1da0a-1ef5-4852-a630-c8051bd072df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e2cd12-6cde-4df2-aaf5-9fcba1ab1f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae72ba90-cc2d-4a2c-93fd-baab2657f144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1525ce-c941-47a6-93c2-3b19e4d96b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92d6977-0b4d-47a0-854b-c0042efccdac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa17b5cd-700e-4a9e-920b-761c148136ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b26c411-1517-4b52-9a0c-be6ad16df550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b0b550-217f-4864-9ebb-5322089dd7ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6a1393-7282-4741-807b-14c935d1ae8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e015282b-825b-41f1-8cb3-ffce63dbc820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a6ffbf-2f4d-4444-9e77-32bd638f2ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303a5bfe-a824-44ab-83b6-63aaf4abc7cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6c15b5-5cfa-460d-a5d8-22bf9cbb05da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee940c1-f152-48cb-895b-ea8fe48cc407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5262d58c-ee45-4717-8b76-c008cdfe34e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4ba514-a5e9-4855-beb3-4f7a29b9502c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1780ec-c9d3-43b4-a0a9-e36d912920bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1cb073e-ab8a-4ee6-a160-f29ed0f2ccad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4973170b-adb4-4a8e-9844-47a82275c368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8727d1-a729-4fce-b141-949a1e933887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb7b73f-b152-4846-94d8-431180412ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363c9641-056c-461e-8f53-8cc7ae7c89b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328b819b-7830-4b33-b77f-b5f977e76849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d87297-9c54-4f95-afa4-01bfd1ca22eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01022119-f4fc-4d0b-a2bf-b569b1d38c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8efb685-ed95-47a3-a827-0b37dc37c035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93af945-093b-4774-8a98-89db01ca9ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd478fc8-e4be-4184-a3b2-69c217d41df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713c3384-8b50-4156-9d51-c4ddc8b813d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f3fafa-79e2-4f25-bb23-dddf747f1062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf0c58c-86ee-4749-b5d0-74ad6e14e7b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72461d9b-e2ac-4215-a53a-6571b64f75d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6d4a13-d32e-472e-b422-57e9250912ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b29a302-b42b-4c14-9cf1-aad5a04be271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b0508c-eca9-44aa-aa7d-771712529b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b040cb-50b8-4648-a6f5-e38ffb678d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4cc476-33e2-44f0-8fe4-617791409c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2430a447-93f0-40fd-961a-a4d372016c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e922740-8877-4f88-b89e-4e41134e5993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9ec3e0-9101-47d1-a671-20c01825bf34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f7878b-2419-447a-9958-28481d1d1d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5481ac5-856a-4d06-a349-c64faa1270f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9616566-1e25-4d2e-9de7-342f5b25381d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67722671-9994-442e-b455-b14d1113a298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c477c5-001c-4f44-9976-ff5dfd61ef8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4369c045-5c33-4cd7-a74d-35f3d87232fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60aa20bd-1159-44c4-98bb-3c7d0a25bb63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a951ee8-a3e8-4582-a963-5b50d16b3a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409ec0fc-9475-4d29-b1da-9ea7b6ede9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc15ce2-9dbd-4355-98f9-6dcc5e955fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472954e0-27a3-45ab-9ff5-16617d296426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83aadc67-4fbc-431d-ae2e-0d91d00d698b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba5b13c-a3b7-4f4a-932e-bec24eb96c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eeb3bf7-77f7-4377-9969-329486f4a1ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb13d41-a479-4769-897a-970e71fc8058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b726978-b4ff-4b42-8495-faade25ac37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37557ad3-059e-49c9-bdba-65c3abd5f72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77660637-8152-4b73-b78b-840a75ce5f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f955f59-7294-4f9f-b4ba-459a1925780a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf3ef48-4281-4dca-a2d7-a66cbdd1e930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88cc15c1-1ee9-48e5-9ce3-7ab0055ef8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43349de-c7ee-42a1-aeab-1d18d792fb68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5247e7c-cd22-44c3-9b79-5a011e384dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb839ad-b204-4280-a5a7-08bf9f81258f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcebe935-6524-499c-bd1c-bf217e4f6457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edd4567-08d5-4fb4-965b-af9e0c3e0ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02559068-fe7b-4b3d-9c73-b1c7bc298a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e90a761-cf74-45f3-be0d-0c19a6b3beef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c7c48a-b0df-4a76-9f4a-ac698fa232a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5572581-2312-483b-bca8-ed481f2d8620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63857bbe-b264-45a1-b2e8-447d62b9be03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9fe971-aba8-4e89-b53d-b6868cf4c356", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.232.238.252']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1fbd4e8-9455-4f76-a71c-ebe6b380ea50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.25.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4dbcf6-9e73-479a-a3bf-3a026145b669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.234.26.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ea2e32-70a1-4be1-af73-7bee56a02f64", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.199.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b048757-6c82-4104-8373-3f17f6fd0820", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f336f341-8fe5-44a4-a35f-751feaf2c3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.243.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9ec86b-ff53-4ae7-8463-d63547810c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.176']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c47256b-d10e-4a5e-9ab7-3810f99bb034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.31']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37cfd8d-ee2e-4d87-9f5d-9ee5e913f135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62556175-748a-4a95-9698-408713b9f31e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a1fd90-87e9-4582-947f-525241416e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ab7219-4d53-4398-9bbf-ba3b32981f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.0']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86f3b37-683c-4aa2-8bdd-b15e68ad9e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.1']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7af2d5a-03a1-4a7a-8950-476334a2207f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f028bb-8589-447b-bd82-5f78a7bbba0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b61931-f3b3-4972-9abb-782676aa15bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.101']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b170244a-eabb-4da3-8be0-e38aa648af7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.102']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8057a1f4-a087-4976-9a9c-ef6ab3aa4aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.103']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e16ad9-1416-4da4-9402-e88bd7667b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895d4152-dcbd-44f3-9a70-471e36a00962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.105']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9409fb7c-37e5-4ff2-b124-355cc63cd423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b53348b-f06e-431c-b2fa-28d52f567120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.107']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc235f45-a30f-4b71-80a6-19ac3ef72bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.108']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae26287d-c959-48c7-b20f-ac3488b3f178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.109']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23d01e0-d649-4db3-bde6-4566e306fc71", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.11']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2328052c-82e0-4076-80ab-c9c008721239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.110']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4dca21-094d-4ae5-879b-3f76e2bb4ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.111']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca2a64c-0266-49c8-a220-e4ba401e5ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.112']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd220cec-8a4c-4a16-9a74-65ec114c2338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.113']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d4d6c3-e0b4-437d-87fe-831717c5c188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.114']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd44830-6524-47c2-b716-3010e301be0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.115']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558eb803-d1a5-4da7-8d77-683a18442f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d03870f-0e9a-4a18-98de-9175aee1c359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.117']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e23710-97f1-4673-80b4-c9eb976ede6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.118']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab33d4e-29c9-431d-a1f4-f36557fbe842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.119']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac4b76c-09e2-4acd-9975-d333dfe8872c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df18f23-8ae1-4134-aa6e-5e25c39161d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.120']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815d6041-9ac1-4744-b097-5a70c17f36f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9faf540-0632-443d-91db-98e9de71db80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.122']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d77d9c8-743c-4a2e-b9eb-a0f994f38a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93b73ef-aeb9-4f19-a295-c0b812b3684d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.124']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0bb556e-628e-4976-8d6e-9ff380cd5f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.125']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d4d758-2b5d-4ada-898b-f35ea9b320e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.126']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6884baee-794c-48d2-8979-cd3d8356ccb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.127']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934788eb-d201-448c-916f-2577fe2abb56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.128']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4c0597-d706-4b48-9abf-48ca7c0492b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.129']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b03303b-dc1b-4c48-a44e-0812ee90ba83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.13']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6c2fb2-17bc-4e79-b837-7f098bf8f715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.130']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c0c5ea-4549-4aac-9529-95c1c1429961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f572b36-1feb-4f87-8538-453c17266353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.132']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6124a957-bc1d-4adb-9100-a2521830c025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.133']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754dd58b-43aa-47d5-8828-5ec5d8198d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.134']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9f1d26-9bea-4f2c-9c70-6d5706f803e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.135']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac06ab19-8f10-4f11-93ef-919471946f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.136']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f86e6c4-814f-4f94-9aa5-108a25e93e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.137']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf19ac8-eb96-4579-a2a6-20c9143c2635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.138']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd361eb9-e090-4c20-a1f8-f2b4c387c15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.139']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd9c6cf-5879-4bb4-8db0-7dc097f1e813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0baa6815-bcb7-4aae-b6a2-421cbaf19775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c9cad9-aa61-4566-9ca2-a530f7f3278b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.141']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28012425-24c4-4ea4-9e3e-b6d815da9087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.142']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef27af3e-70b7-4fce-9bd0-b22fdc320b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.143']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f46cfca-3adf-41ca-8085-8e9d258d37f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.144']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adae0311-9a03-449e-b223-7f75462109b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.145']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ec2056-6151-4972-9c82-cb988bdde155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.146']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0bc94e-e38d-45b3-b5fe-1c6aba79aa2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.147']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb474f23-35e9-49a9-9ab6-53669a53bc5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.148']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22a745c-9c20-4d17-9116-cef70ef8f56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.149']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ccfb58-39bf-46dc-87bc-407406b426cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a493d5ff-d1dc-4cc0-bf07-f35eb35bd028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.150']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5c7cff-b5fe-4a36-88ec-21d45c69e321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.151']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea240363-ed61-4aa9-bde4-50ac93b9ded0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.152']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56af0b6e-1f82-49be-bc46-ef7e0c809868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.153']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97cc266b-e69e-4cab-9b8c-9f3e8fb1e312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.154']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bac9e4-3acc-41f8-adf7-7e45fe79cd51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.155']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8f16bc-90cd-4b2e-b2be-8a498984dc4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.156']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3e72c6-d5a3-40a6-9936-12c52b45cf9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1644e42-1da9-4d2a-9362-6282b1220705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.158']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610715d8-e0e9-4064-8ca4-9ecbf9016dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.159']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60da15eb-75d6-4ef3-9e04-7f0b3e6b0f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.16']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d25c253-4160-4a54-ac53-5087214d7f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.160']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7277f1-4ba9-469e-bf7f-eca2b2c044fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.161']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7fa270c-01a2-4a31-b938-0642a5a1f04a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.162']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fbd96e-b5fd-4a82-af57-27d69947116f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.163']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb2b4ff-b820-4400-b184-7c4b6cabc5bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.164']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7e505e-30d0-4579-a1c3-147343f2c7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82def39-7389-447e-858a-93017476c038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.166']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750c8ff1-ca05-4b78-9cca-4aea6cdf365f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.167']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a4daa6-fcbf-4e2a-9e9b-695022e97018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.168']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00cdc24-0917-4662-ace1-d0f3c11ea4c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.169']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8716ed56-ee44-42b6-b766-dc80d21390f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.17']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdb736e-1f08-4983-ba2d-89a618f803be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.170']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ace5da-4389-42a3-b357-6f3eb83e7cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.171']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f60440c-6d38-42e4-b0ec-c49688e0e554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.172']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ca298e-0b35-4e80-812a-1a4a40a02baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.173']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2dce8e0-e8d0-452e-a9f1-a059af0de027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.174']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beaeceb0-a974-4a2b-b4c6-f5ebac83d93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.175']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b126a55-3d23-42ed-89f8-adc58de489df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.176']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5f87f8-649c-4e34-bdef-df9d54466d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.177']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca22dae-22e5-4ec0-8e36-3a89c91d272e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.178']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d7df1e-261c-4a87-9404-bd6710fc5aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.179']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0d4c58-4a03-4625-8bf2-c7aa2e70feaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.18']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f62dbb3-7389-4b57-b654-66d883c04a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.180']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabbadd9-78cf-40a5-a36a-6199eeae2656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.181']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc34b4d3-94b7-4a3e-8f8a-a1b1f607ec51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc24c634-79c5-4a3e-b20f-a4f01387bafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.183']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed58a68f-1d1f-49cb-8b92-ac3730755652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead59e17-5934-4620-92a5-0996b6ea663d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.185']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96dfdfb8-6ba5-4d1a-95e1-006799c0604e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.186']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ae0358-9144-4615-80d2-97c1f6b36576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20bf7e6-0600-4afe-983f-cab30dcaa912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.188']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f427e601-c0d5-4941-832b-9a2db69e3356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.189']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999f3b7a-e581-408f-a397-89dbc1c71274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.19']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b866b99-0c71-4c9d-957d-04f08559e8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.190']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd64f54-7ca0-46b6-8db4-80bd02a8319b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.191']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02b93d2-b53b-452c-8807-85e6d9432620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.192']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0fcc925-1278-466f-a82b-9aebc3873303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d0e291-7c69-4279-b313-5b53bcdfdc12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.194']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d3c0b8-87a1-4a67-b274-d76d06d5c8e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.195']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef44baf-33de-49ee-b6ee-387d2dbd3954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.196']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b455f2c1-199c-46c3-93e6-91ae0922f8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40ffc96-82c6-4585-be0b-11e4d5f4df47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.198']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f477ff79-4905-40bc-913e-e6ff2b3f2651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.199']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bffd20-6f0d-4242-ad30-32ea1241954f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.2']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41b6ce3-2054-48db-9ced-bddec0c41c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1a63ae-3dc8-49da-9804-de5ffb1564ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.200']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1903e5-dba7-4065-af26-0b80afaa438f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327d1242-f2ff-45fd-8df4-c99d237defd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.202']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95fdee1-ae62-4d7d-903b-6435f8fa00ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.203']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2421dae2-5019-4dcc-8db9-775e8ac0cb75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9965f4f5-6658-4121-a746-67162c884594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.205']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8224821f-6846-4278-8925-d0b5869cc242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.206']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fe7690-55ec-4e4e-b0d8-5f4f2543f5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.207']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1325cfd-ce82-4d4f-bc46-a3adfcafc54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.208']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e93d8a-305c-40b2-a5ed-97fa211fd394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3071d1-c7e3-4ee8-bac5-d7ec8a1489a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.21']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed50d87-b2f3-444c-b376-0b0af101f1ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.210']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db970ab2-0d0e-401c-bbc0-4865747ea497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.211']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffcebef-37d0-4f1f-a75e-e301cf951d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.212']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1141784b-9b7e-490b-b663-01bd8a88e6cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c83e210-0845-4cdd-b9eb-9e345ca0de9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.214']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a787f53-5cea-45fe-be04-c03bb1f6a1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a31a9c-2b45-4079-9cfd-5d7120f29a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.216']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78dcb7e-3fca-49ab-88c2-263d0e605a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.217']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17da8117-e4b9-46eb-941a-271c1d953258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1237c0f-3a96-41ba-b1a4-44785b970f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b8beb1-06d9-4434-a20b-f4d707ce9736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.22']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaedcba1-1bcd-4813-b4c6-fa2d691941f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.220']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864ecaa6-3081-4c4d-9a0a-1eca6bf4d7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.221']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0023a2-f68e-42eb-a604-133e04a4f931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.222']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b29f5a8-ed28-4f85-9d25-fc7a4f170a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79ea20d-d7fb-4a55-b815-dc7d3ca45375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.224']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a863ea54-c33d-45a3-9d49-39396818612f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.225']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c53df6-939f-4b99-813f-5107b8aad6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.226']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd12e47-765e-4a56-933b-439009fd6c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.227']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860d0b34-f53b-4423-94ce-99afffbc7a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df69be96-f6d7-4b28-ab50-91d5830014d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.229']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f8c753-9993-4161-a281-6377be1464f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.23']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450dab7b-f4de-47bb-981f-99c0e2fe2e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.230']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4778c074-0a5d-4695-9f6c-a46be4e37d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.231']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed9402e-8d2f-4112-92f9-cbf0e03e3add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.232']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef696b4-31cb-427f-8d92-7be551186912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.233']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe72c1dd-3190-4c76-80ed-6a75c609d892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac84f9c4-63f0-4e12-877b-6d7b33fb8814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.235']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf25487e-f654-4693-86bb-94e71617953f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.236']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144f5f5f-1915-4227-9df3-fbcfb8c18919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.237']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4664710-09f4-41f4-841a-eaf2c5b45cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.238']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79bccbc-29ac-4090-b855-96655aea8bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.239']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f22d855-7af7-4ef4-bc80-dea5d7c74f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7701390-242c-4c7c-ade0-6a4aaaef6505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.240']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7590f90a-5c66-416e-ab7d-9f7077ff3f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.241']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a557ea3a-706e-442d-aaea-883906c23524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.242']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999413f7-2836-4ff4-b15e-3a928ad63e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.243']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8142a972-d9d9-4507-b19e-96a837be0b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2dab6d0-73dd-449c-a785-5d26448317fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.245']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b79b02-4c67-4e8c-aa38-726ce1837591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.246']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6becf629-fa94-4e23-8b1a-260fd4fe2689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312e4686-f13d-47f2-b2b0-b860204e83ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.248']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ec5672-6e84-4382-b05d-fda60789dea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba183222-b248-4672-9517-6a2e93aa50d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.25']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01bdf5ce-c905-4cfb-b001-a6897d564b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186be96e-b7cc-47c7-9f9d-d1c6cfdc9477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.251']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb5c105-0acb-4c32-820d-57c382a99c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.252']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b8fe1d-2725-45f4-b562-7a34208ef744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.253']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41173460-4af5-430f-9853-51521217f9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b872a5bd-e613-4ccd-9d1c-24319773303e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.255']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5ffed8-4103-485b-be22-c50f0c3f15ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.26']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12372bf-2510-4e62-b2a4-2ddfa93ecb85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.27']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79dc7828-5118-461f-ad1c-4a3f9853c742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d37b1c-f741-430f-804d-46f526eaef38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.29']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce4ec11-ee3b-4f03-8643-bbf4813205b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719625cc-a16a-444c-b5bf-f3e44d2177a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57dc0842-11cf-43a5-baeb-f01f4ccf9240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.31']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c28c5a-cce2-4e2f-919a-17c507230a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.32']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f79bf72-033b-4367-8c00-6763e9f1bf84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.33']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee2b17c-c282-4a06-ac86-1a93bc0ab4b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.34']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0875ccbc-76c3-4e09-a88e-46499f1290f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.35']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d962599f-d68c-4181-a857-1683158c65e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c008ee-a863-48bd-80b3-bc288af1d76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.37']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff32291-a916-445e-bb1c-40e88a5a106c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b793bc57-61c8-47ff-b10b-763ee2048678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.39']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd8eafa-33d5-4691-95aa-66a6fb20c946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.4']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d258c3c5-455d-4271-b2ef-703b8b8330b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.40']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a394bb-26f3-4a4c-8f78-a18b98216c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.41']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a413c2b3-0e2d-4f61-813f-34a5860927eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.42']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fc62c9-1b6f-4e61-a6d8-5b274d4f8c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144f6ca5-6f99-4c09-87c5-ee6c1d631978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.44']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa881c7e-4f32-47b7-b70f-10b875c904eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.45']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e592cf5-25a0-4a37-a065-9a8de99e0737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.46']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e462768f-ed12-4da4-8339-76a5d2935a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.47']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6a94c3-8950-41cc-b262-942ae7b18783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.48']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee51732c-a261-497d-b383-5db190ef1d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.49']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4611dba1-78a2-4efd-9353-80aa6b3611f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a9ae40-ea06-46d9-91c0-69ae5d9f33ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.50']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d76ce2-4109-45a5-95df-ab98e6ad5dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391bc40d-a8f2-4e27-9e3d-dfc7cd7027e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.52']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6876bd58-9952-45af-bbaa-d974c9650ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba38f501-7406-4308-984d-f2be58a6bd9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.54']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce95e714-49a7-400c-b725-849774120f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.55']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4857d5-23ea-44e5-b514-b4280f23268c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f9da9e-aa61-42db-8645-b1fed8e51fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.57']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d56a31-746f-417f-b814-35e241a27eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.58']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071fcff2-9dbf-4ffc-80c6-8b9c08097f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.59']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89396eb5-f661-4aa1-b3a8-18fac0c6c021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.6']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92ccb67-1187-43f4-b3f0-4800a211f8c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.60']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d815044-8f90-459b-998b-a5f3b552e972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.61']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb0a18d-873a-45a9-9952-cb2084b6af82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.62']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c1357a-32d1-4469-b771-458cba132cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.63']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473af939-e479-4099-a0d0-6db764f2dda5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b5f9a5-5deb-4cc6-86e9-1bab2b78cfc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.65']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224d7bbf-a38a-4112-ad1d-fe5fb2071bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac572e9e-4c7e-43b7-a174-6f78cff03023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.67']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c89989-3104-48ec-8956-1cc91ac02df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.68']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af08b21a-f8f5-476e-a4b6-72cf36411f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.69']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3baee76b-f355-4df1-8b32-d66e84acbd15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.7']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef1937f-1483-43a8-a205-925046b9a716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7f98e4-58ee-4921-846f-83ef5953d3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceccb8e0-354a-4918-bcc0-607b4a416ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.72']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4e1bca-a00f-4399-9412-a04bfa48a712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.73']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3cd1e3e-9c46-47e6-828d-289d5d5ff445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee152f2c-bdce-4ecd-bdcc-e93f44047cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.75']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132f33aa-ade5-4a29-b014-4099fae2b77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.76']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c8b87a-ae33-44ac-a90c-f79c8fd60a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.77']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a507fbc0-c7d6-4323-b4ec-5046976e6e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.78']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6716527f-fc8b-4aaf-a39e-3acbb69eb012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.79']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a95de3-f124-453f-8cac-5531f585e4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.8']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98847e4d-e2ff-4be9-af19-e4bfbf318bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.80']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2511d629-4a28-4eea-9adf-69f1c2fa2593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.81']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e866977d-0860-4909-a143-f71770d6c9ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.82']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4944d037-13da-4969-8001-9a0a03ebbd28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.83']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4bb3a8-5376-4d71-818e-4e491080c442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.84']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b81076-5f33-4848-b2ad-b59e2aeb3156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.85']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811b13ed-49ed-49c4-8ce1-f1ee8b24471f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2330a7a0-cbf0-4c6e-97b7-6c3ac455b5ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f429c0d-b6d8-4bcf-b2ca-cbe5c9ecd695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3add706f-0796-4a95-94a9-2e2ed002a882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc340c96-0fb3-4f34-855a-ad2b260d6224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d540274-76db-4e79-b6e6-98860f75a3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.90']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6117fe-b942-4e11-8689-1a7808e10bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.91']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8fe594-e24e-4114-9f4e-3cae62f09800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.92']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d8fa23-7806-4200-96e1-fd1748782c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.93']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e7870a-2826-4f10-84e4-314128e898ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449a9261-2d04-4cf4-8378-d5824557c78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.95']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f51f86-565d-4e88-9641-44ee4a0c8492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e934be52-c07a-4972-bf92-4a83ad84d6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.97']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4747c2b9-bde5-4790-97a2-9f8f59c96946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.98']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c890e4-9a5b-484a-9d58-44ab571b0597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.99']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcaf6977-aa4e-4c0c-82a3-ace0bb6bf1b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.43.121']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0697ea4d-9bef-4cbd-a47c-36d9feece3ce", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.123']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3960dcd-4915-4303-8cca-42e06d9c5e7f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39013e52-7f0e-4dc2-82c5-dedf188a5b05", "name": "Malicious Host", "description": "Web exploits: aws-credentials. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.187']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb01076f-085d-4efc-8bd3-d113e51f7b12", "relationship_type": "indicates", "source_ref": "indicator--39013e52-7f0e-4dc2-82c5-dedf188a5b05", "target_ref": "attack-pattern--2099f92e-22d5-4f56-830c-a0f433029f77", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da8eddf7-3999-45d5-ad2a-5503ce9d8c15", "relationship_type": "indicates", "source_ref": "indicator--39013e52-7f0e-4dc2-82c5-dedf188a5b05", "target_ref": "vulnerability--c81e14e0-c6e8-4463-9ffb-b98b2c6a5160", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a4c101-0218-47f6-b11d-b11135e3d01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.252']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c48f3f1-1691-4a69-add2-14e98161ed38", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.53']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f97855f-2724-4da1-b728-8807c4578023", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.96']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b218a5a1-cfa4-4eda-8b40-25eb9d494763", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e9b6e0-9da4-420f-9aac-ca56f33f877e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.71']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b574e6-035b-4d32-9107-3b1f5fcd9c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dae1a9f-d9ef-4520-b017-620d16c3d08e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.86']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33d3720-5fbe-4bf9-bafe-e7faf83875e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.57.209']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36230127-4f17-40cd-95f6-0d3003324b79", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.59.204']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a65cb4-3ff9-4722-9714-07a3ca0efcc0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.167.51.14']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8200ee49-4bd2-43b1-b356-d1e2d51d840a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.128.28']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d8e394-6f17-46fd-b363-e8dd3cbee042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.209.211.1']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8ea7a6-8ea6-470b-954b-95da79903121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.48.89.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4479306-0f66-419d-a67f-1858fe9dc1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd89051f-d6c1-4103-9e6b-cdb305ac8c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.113.10.244']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d711a4-b9f5-4844-94a8-63065db9a754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.116']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f8e475-be9e-4436-851f-6b878cc3ccd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2002-1149. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.228']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ed21ca0-dfc4-4ab6-88fa-8abd859a1ba9", "relationship_type": "indicates", "source_ref": "indicator--71f8e475-be9e-4436-851f-6b878cc3ccd8", "target_ref": "vulnerability--c81e14e0-c6e8-4463-9ffb-b98b2c6a5160", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd76ba1c-9941-4cda-8a41-160321de4fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3473c3-3771-4312-9d72-a15e8f3a7869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.224.9']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e62185c-3292-41d6-ac6e-a826c1855239", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.171.178.215']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c48f147-a3dc-4b12-8e7c-b396aa4b8f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8a7b19-7987-4e3d-ba6d-aabb2b52a35a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cce096c-bead-4378-a3cf-aa421ff453a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.10.80.165']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4446ae-f059-484e-ae53-0792452a2e10", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.4.88']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1f7efa-356b-440d-ae07-b2c0b1ba81dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871b7565-5ad2-420a-b662-480549287cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.139.242.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fc6c51-ae5a-4048-802b-1e80319346b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.10']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3cbd88-30b7-4714-a5a0-430e830dde0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.100']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8ee852-8619-46d2-be88-ae0a094bf4b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.104']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5602ac56-6e49-4220-a3e3-94f8915477f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.105']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d99fafe-a64e-42a9-95bb-df293c56254f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.140']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428f0f96-4ae9-4e66-85f6-927a5d09e8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.163']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6906e13-c406-4417-929c-97235e3c546b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.164']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ca88a0-df8f-4800-a693-c24cbc8212d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.180']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64eb7790-af71-45c6-a65e-4c8fc82abb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.197']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff346482-566b-4dbe-9353-e7c77040b0cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.214']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0666d1f9-11ff-4950-a2c7-e58ee6e4b6a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.219']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de81e84b-67bd-4468-a18f-45f1d50302e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.249']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7a3aad-0979-4f09-abbf-3e41403e289c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.250']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c61f667-9a16-4224-b313-fb2fa950b2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.254']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a9181d-b8d1-4f9d-8e49-d14a71b5968a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.36']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0de7203-5e74-4733-877c-79910cb7eebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42edd2a-199a-469d-9edb-7f3c90cb3533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8260f34e-66dd-4c73-8e8d-9779bf4e4748", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.56']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12686965-4b13-49d9-883f-114370dea5a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a007be2-5f76-4a31-9dbd-ae4c573d100f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.70']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7b0f03-e1f3-4a43-b4bb-f688d309ec69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.87']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e2fe52-f276-4120-8197-b73484c79462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.110.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e08bba7-6faa-4174-808f-c152cf2eb2c9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.182.149.20']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653c2553-d93e-488d-8397-caec0b15a447", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.182.157.184']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad1fdee-d838-4dda-8061-872c7cbe5531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.131']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f59b56-b879-4cd9-adf1-db824b445c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.3']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507262b1-94bf-40b9-a6e1-73a4213f6cd7", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.243.10.24']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884bb44f-12c2-4e39-822d-c1031f823be8", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.243.9.15']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f80d9b-d942-447c-a3d3-e64855215e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.253.181.234']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eeef39e-3406-4545-bd83-226d024d9817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.41.173.218']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7bfc32a-5aed-4101-8740-5d031e44f0ca", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.43.81.182']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f62072c-77cb-47f3-9f08-a855a0628087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.168.169.201']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336056ab-ec40-4f98-9ba2-52ca8648dfc0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.173.188.94']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417e5aef-6855-4c6c-8f33-ea37fed58a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.173.207.168']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20cef544-fe81-4a9e-9660-9b318dc6d47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d87ffda-97e2-4e07-b7e4-52f3978e1cba", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e985c4-ae7f-4d33-b63c-a543418f1d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.27.142.43']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c65ea4c-5ced-4d0c-99e5-1b11a2be6f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.78.66.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c69b19c-ceb8-4090-879f-df0be4f09366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.8.49.35']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999b2e3f-e6f8-4a0c-9927-6d5193b277a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.66']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4967b69d-8275-4de8-9b73-48a3fcad9809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.89']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ac2661-a4cd-4432-aa74-6a748197de81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.144']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920fdca0-6113-4550-957e-de2a16abfff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f1f61a-1dba-4cb4-93c8-a93f8a05f2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.51']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35286746-fb0c-4b8b-a50f-d905902e4fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.130.64']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff02c1e-7e53-4583-888a-4b76e5881599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb235da5-0f58-4355-9c1f-6df35302738e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.136.223']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b468b173-2c08-4cfa-84f8-f356042fc0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e898f617-a38b-43d7-8a0d-4a3f2b1a656b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.92.144']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40803bac-3977-47bb-a817-62ce08cf9e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.88.249.38']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b9c730-be31-40d6-8787-fd244e7f6be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.93.16.247']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97976992-3f63-4e90-8a97-631c738ce5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.94.81.30']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804af10e-4bca-4cfc-a079-8dd12b80608c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.63.196.62']", "pattern_type": "stix", "valid_from": "2026-08-22T00:00:00.000Z", "valid_until": "2026-09-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-08-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809c141c-19b1-4502-980f-559432a0d379", "sighting_of_ref": "indicator--868f776f-0b0c-4076-9290-556b8b7e9e1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451509ff-3ecf-4812-9bf1-7484fdbbd2f9", "sighting_of_ref": "indicator--9a2e54ea-4b29-4633-974d-3d9a8e098de6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf196af-8a8c-4456-ace0-1d9f3ba53d03", "sighting_of_ref": "indicator--c2053828-36de-4b97-9d50-7612875f7c65", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab516c0-8a49-457a-be1c-94232421ad68", "sighting_of_ref": "indicator--181655b4-8e0d-4676-ba8d-402f2a9fcd4d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3bea5d-a667-4ea0-a01b-a48f00da6196", "sighting_of_ref": "indicator--412f0df3-8f36-43e7-b353-6308914a9761", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750ac11a-1fe2-4a75-ac1c-c1568c2e7681", "sighting_of_ref": "indicator--8b1c5eee-66ef-405a-9e5c-5aa0404c04d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91eb313-b9cf-406a-8df1-e8943960341c", "sighting_of_ref": "indicator--95aeab8f-a5e5-4acc-981d-60ca76c256b6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3cd0c57-eeed-45c3-9353-e03450671a61", "sighting_of_ref": "indicator--3402eb96-4221-46f1-85a2-abfdcd25740f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71f8fa4-f45d-4e3e-b9d5-36e0c0064653", "sighting_of_ref": "indicator--91486b87-f10a-4b54-9e9c-3118aadfd38e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ff2412-efca-4981-b4fb-917df59a305a", "sighting_of_ref": "indicator--1bf55d12-0524-4a6c-9dca-f4b5d0888fb7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54dc1fd3-e8b0-4854-9d0b-447441daecc2", "sighting_of_ref": "indicator--723f306b-778f-4a87-853a-f77324f35285", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a98796-abe6-4884-bae2-6554243a0ee6", "sighting_of_ref": "indicator--0c9cfe24-c0ce-44c3-b3e8-8346bb8b06bf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6db71fa-caed-4567-9f63-fa4170aae57c", "sighting_of_ref": "indicator--ef94781e-1be1-43d5-aac8-a6378a42a729", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590493c9-42a5-4a11-a543-a23bffd62448", "sighting_of_ref": "indicator--28b30254-5446-44a5-b15b-8a571b5f1b24", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26e9cdb-903f-4562-8026-a11481197940", "sighting_of_ref": "indicator--057bb10d-86e2-4a37-ba1d-973c6bbd93c0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a5179f-9e7d-41a9-9691-6bf77265a33c", "sighting_of_ref": "indicator--0fdf176b-0aef-41e7-aabc-0b347276326e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62af5c1-c765-4a77-a703-31d92bb6fefc", "sighting_of_ref": "indicator--075aef4e-16c0-4ebe-85b9-6e62b602eff7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e108b2-0549-4370-8c8e-5f1bda4cf593", "sighting_of_ref": "indicator--561f0f53-9ce9-47d9-af2a-1cbe988a2f96", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0a0156-935c-486f-a279-048c59a1fa3f", "sighting_of_ref": "indicator--9fc5a9d9-b2fa-4cb5-b235-dd02ce50eab0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17ad9aa-0cf6-4b22-b101-cfec94bafd3b", "sighting_of_ref": "indicator--71962d9a-9b42-4923-9591-3ef98d0e043f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abf3dad-a6f7-4299-9d84-894ad8843183", "sighting_of_ref": "indicator--4b7ba78b-c085-4d42-9316-5ad6b07527b3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303b8b4d-4985-444d-af26-2e32314c4ff0", "sighting_of_ref": "indicator--3c33c882-0fd6-4523-8ab3-a405d5fe8d6b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6d21bc-9f34-40db-b003-0daa395a81c1", "sighting_of_ref": "indicator--90651a7c-3472-48ae-aed6-616a078611c6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71dd058-2c3d-4efe-8614-fc8827df0fa5", "sighting_of_ref": "indicator--db8c8abb-aa52-4421-b5fe-c6112a234724", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a32cfd-fd06-4761-bf44-c64778843743", "sighting_of_ref": "indicator--5b08b104-f1ee-4b77-a017-2095885b7314", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362209bd-e618-4d8b-bf07-360f05e04eee", "sighting_of_ref": "indicator--dea8593f-05f4-4e2a-9f4f-51e78d1c81fe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8a85a9-ad9c-4e10-9b1b-db0e5cb8fdab", "sighting_of_ref": "indicator--44fe703b-1a58-4a65-b941-fac2590ac6bc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e95948-93ca-45d2-ac57-6686c226a547", "sighting_of_ref": "indicator--3c9fd892-19e5-4a1f-aff1-c923c387e40c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f6948c-00cc-4742-b006-bfe545d129f6", "sighting_of_ref": "indicator--db238ad7-54a1-46cf-b6e7-ac9ac6998819", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731f5d83-cdef-460e-bcf5-15f69a58aee6", "sighting_of_ref": "indicator--40053316-ca19-455c-8e65-84f041f7ee07", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118b2c13-4233-4e8f-ae79-893c8c4bbc4e", "sighting_of_ref": "indicator--62f378a8-3660-435e-97c1-4e4c9543d45b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e85a80-4320-46d8-8c67-db58ee55bcaa", "sighting_of_ref": "indicator--a1e17d40-298c-4ce0-ad67-bc6087c7fbed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066d667d-07bf-489d-ba10-b184dbc396d0", "sighting_of_ref": "indicator--8d720b62-6c90-43f6-8110-b78c022c9ee9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871b1c35-00a8-4b72-8303-bf12a7e4c757", "sighting_of_ref": "indicator--958ad5a1-0bc8-4fb5-88b9-82ae45e13a75", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ec814b-a1b7-4b49-902a-5d6b9d808367", "sighting_of_ref": "indicator--cbef4253-8a34-42b1-ab00-75ea909d2b3d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456ca2cb-8813-431b-973d-4020c0d0b586", "sighting_of_ref": "indicator--742acde4-177d-4d34-9e11-0b58fbada6b1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc5bf1f-a49b-40a5-b1cb-216a01dd3d03", "sighting_of_ref": "indicator--f28977ed-a8f5-460d-af23-202bb3ad6177", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830cd490-ff4b-43c1-ab94-fe121825941b", "sighting_of_ref": "indicator--e2b87b6d-ee26-41a0-92e2-536df1263807", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bde373-8d01-435e-a5a3-2c340da28807", "sighting_of_ref": "indicator--c9e8cd24-d1a8-45ec-8893-387fc1dfad7b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f5747f-0b04-4cda-b369-3e3454cf44c0", "sighting_of_ref": "indicator--41ffb78f-5aff-4fa4-bf48-40f345273fe8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20840484-783e-431f-8ee9-56d36f9d6e78", "sighting_of_ref": "indicator--3689e7ed-bc96-4f80-b1b3-c7451173e1fb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f566b4be-10c9-401b-baf4-c176789ee628", "sighting_of_ref": "indicator--c7d72521-cf6f-4c7a-8930-85f128d66713", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce088e9a-b7c1-4383-884d-a3c41b714b6c", "sighting_of_ref": "indicator--6e48cd44-3da5-4800-b678-40eaec6f9cba", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575128e5-e19a-44c4-8288-6deb9c216beb", "sighting_of_ref": "indicator--7eacb40e-1c61-43ad-9982-d47fb750199b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868824d6-6395-4251-a141-02c75c72dd06", "sighting_of_ref": "indicator--e26a54e2-e3c9-4828-8673-be2199ac4d79", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0b5bf6-4b8c-410b-8cd3-55f4bf79fd3f", "sighting_of_ref": "indicator--b04113cf-e761-464e-869c-c813d08c0b7f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f59b81-1c66-4634-aede-19e7739e8cc0", "sighting_of_ref": "indicator--47d64b9c-5ee6-4ea4-96f2-7c4ebeb34f62", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad480c98-348a-4c62-bc3b-a522fd9b0aaa", "sighting_of_ref": "indicator--bad19910-3bfd-4218-84f6-4d7affc0f0a9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790a6f87-955d-4552-a98e-d2fd84786062", "sighting_of_ref": "indicator--e5a3e8b7-3f66-4c9d-9420-e7c31ecd91f8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e52a72f-fe12-47bd-aeea-3b5a698052e7", "sighting_of_ref": "indicator--42cd5b9c-81fe-46f4-a723-d13d65a9886e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382e1831-fb79-42b7-99c9-cd675a92ddbc", "sighting_of_ref": "indicator--f318b7c5-1568-4486-9482-f979c66fd67d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb97489-8301-4f23-bfde-ba7ff9ec93f8", "sighting_of_ref": "indicator--2d252c5b-f0fc-4074-9db3-d95f1c86ff8e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99b3849-2df3-4f15-b125-f6e130f5b765", "sighting_of_ref": "indicator--19723313-4e08-461e-bbd1-c92709deb1cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c2b619-402b-4306-ab13-3a1f5968fe6a", "sighting_of_ref": "indicator--18ee6614-0b10-4fae-bcea-0111ceb0801c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b5066c-d8b5-42cb-8715-0f1bec296895", "sighting_of_ref": "indicator--b555f0e9-5cb1-4558-8ab0-4cee30b36acc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1e6788-53ab-4879-b963-c7abe43a7e4a", "sighting_of_ref": "indicator--83554d9c-b1cf-42e0-ac1e-a1836bde13ff", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25928aa-f304-4794-a1a7-ea39055349cb", "sighting_of_ref": "indicator--1d6f8106-23bb-443f-aa5d-e41943bce2e2", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4ac0e0-4b14-4659-965e-3d9c41cf7e63", "sighting_of_ref": "indicator--cce4a6c2-9569-4f8b-b18a-5ceb32896ae8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19974a32-41f9-42cb-af63-ca70d37b86f5", "sighting_of_ref": "indicator--91e96aa2-76c7-467e-9fcf-c8c52e3c710b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26cc680-8d74-4dcf-b86a-8a78ed52b452", "sighting_of_ref": "indicator--8279ec25-c3d0-43c5-8226-e2ec5883a0b2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3246b802-df5d-4ded-936e-c5e403c5f0e6", "sighting_of_ref": "indicator--86807003-afc3-4c22-8e5a-978b078955c9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eaade14-262f-4d22-ac10-e843d6d7cb86", "sighting_of_ref": "indicator--4c7696cd-0400-4229-a1a1-84e8e52944f6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5b5442-7f9c-466d-8d94-a17c9d719d2b", "sighting_of_ref": "indicator--c36c6dac-662e-4a26-bf7e-f3e86d3b68cb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eab1297-c2c1-4d2f-a92e-ceabd0795a8b", "sighting_of_ref": "indicator--7738f304-5afb-4b67-a29e-d62c2ccb5873", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13113271-792a-498f-81b5-b88ab9f66fab", "sighting_of_ref": "indicator--8cc715cb-31e7-457a-aec3-d5f2fdd72519", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6152f3-cfb4-42e0-970d-10742f012e4e", "sighting_of_ref": "indicator--019ed6ba-734d-465f-914c-541490c1417d", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fa8a1e-e663-4fe4-90c2-8be55450140a", "sighting_of_ref": "indicator--cfc2f558-b294-48c7-bd99-d3ba8b9e962d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437cdd91-e165-4446-babf-c32d8ee38105", "sighting_of_ref": "indicator--de4cc913-2baf-454b-acac-aaa7d0fdc16d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9b67c8-d02b-44cd-b0c6-13001ee9a2c0", "sighting_of_ref": "indicator--b4f14199-085a-4357-b04f-7053aae9ad3d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b621b23-45f3-4c28-a085-1b7a45db2717", "sighting_of_ref": "indicator--5ca8bbce-8195-4ce5-a9c6-f38db11f114c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2c54d0-36e1-4062-ad1e-71b8f22437dc", "sighting_of_ref": "indicator--9c356870-80ac-462c-a0d8-c696a0bcc2e9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1582a8-f3f2-41b6-ac10-d801813f7715", "sighting_of_ref": "indicator--8f08c566-bf87-4b03-9abb-8c09af95bd91", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa4664c-fcd4-4ae6-8ebe-fe0933374d4f", "sighting_of_ref": "indicator--92ec4530-5505-4f55-9427-9a6ae8e246cc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51f3f56-a90c-44d9-bca0-c6fa2d2907ab", "sighting_of_ref": "indicator--dbc036d9-265d-4a97-ac1f-76e56cb6421c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c79071e-a20d-43cd-a800-4b4040bbc58b", "sighting_of_ref": "indicator--5890b305-f690-44bc-aca3-e5ea6593c4d7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9480b6d-ac7b-4b5f-b959-dd3c948e0064", "sighting_of_ref": "indicator--9357716d-60cb-4c42-b3b0-48c681274408", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b386510d-bf05-49ea-b681-edfab3a2867d", "sighting_of_ref": "indicator--e747146c-2fe8-4dbc-8275-36b2a099694d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35315f43-1c41-4d49-828f-7069121b75a1", "sighting_of_ref": "indicator--7fcbeaf7-8483-41be-a16b-530d4526d6ab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311f8c30-ee63-4137-b512-f77d4348fe7f", "sighting_of_ref": "indicator--3b6b208a-1592-42cb-8adc-9bd289e31c47", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0020a7e9-0c79-4ae5-9bf3-20faec5cfa69", "sighting_of_ref": "indicator--7beae1db-a207-4ca1-981f-cc7511329947", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3739cb-4152-4f26-b0f8-a0b476c470da", "sighting_of_ref": "indicator--fbc3ffb1-bdf3-468e-a3fc-36d5b82539e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbf1c10-275f-47fc-98fe-b59ef2b0d536", "sighting_of_ref": "indicator--7472b13f-3516-45cf-ac99-a46e90e8f84c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecec1287-f2de-475e-8f6c-f5b5ae4e3763", "sighting_of_ref": "indicator--67417d30-437d-4299-af0e-6409db2a136e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7630808a-bc54-4291-9ceb-3cdf45d19e9c", "sighting_of_ref": "indicator--206ab8cd-52b6-4a56-827b-f6ee3f123b74", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc85777-7c22-4f49-abe0-b94fabf77f39", "sighting_of_ref": "indicator--860e2a1e-94b0-4316-9a6a-eb9a50766cd2", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e9cf62-3440-43d6-8fa1-ef87d8a4828f", "sighting_of_ref": "indicator--87712eb1-fe58-4fb5-83b2-df7f9e2ea945", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c3829b-5a8f-4ae4-b38d-bc97fd684ffd", "sighting_of_ref": "indicator--2225319e-b792-4846-9dfe-2120a5d35dc0", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6260e576-6392-4b0b-b60c-fd37c670f10d", "sighting_of_ref": "indicator--ffc60a7f-c284-4e7a-9cd7-efa7ad8de46f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b00579-20f1-4123-abf1-bcac80690fd3", "sighting_of_ref": "indicator--37a832db-42bf-408b-811b-dadd9666b7f9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a0d1da-2d82-4495-a596-01045053be58", "sighting_of_ref": "indicator--6d6bab8d-3e22-4b1b-8c9b-bba1c15946c4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458ecad6-b7be-4b7d-86eb-8a78eb5318e7", "sighting_of_ref": "indicator--0dd7c11b-566a-4b27-a5ba-a8e4dab05a33", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ed0f58-2b30-460a-a2d8-d105b5f30910", "sighting_of_ref": "indicator--7d220acc-e4f7-47f0-a6a9-d7d84067cb78", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af43e3e-d4de-465b-b035-a9871e5f1804", "sighting_of_ref": "indicator--69d00fbd-8f50-42ee-a0dd-488013b7ef2e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0bad19-1b6e-4519-bb0a-18b0b08e16a8", "sighting_of_ref": "indicator--729b852e-cba2-43de-ac1d-cf6601d8ae4e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02519b08-1c8f-4151-b19e-1ce5bc821d28", "sighting_of_ref": "indicator--340718f2-d33d-4635-95f1-3160d0cfe762", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f3e181-c32e-4f9f-bbb9-dbd6477ab5bd", "sighting_of_ref": "indicator--b9f344ce-5857-4103-876a-d69d4902e09b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca5a8d8-25b8-4ea0-b0a0-fa75a3675062", "sighting_of_ref": "indicator--81ab6088-5819-4da1-8311-03214f3ce3d9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72e5b34-d22c-4b4f-aa38-ce80915fcd81", "sighting_of_ref": "indicator--fcbf2d33-43d0-4b3f-bacf-aa7ed7fc0077", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1678c2cf-f3bb-4f54-80fa-1b90fe29b576", "sighting_of_ref": "indicator--df8c8f19-8162-41b9-9ca4-fdd6fc488825", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a035badc-4ffb-4fc9-9b42-a44d48df37b8", "sighting_of_ref": "indicator--d0523a20-63a5-40d3-951d-25d24eb6c9ab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0ca56a-b3d6-4b31-8a03-42c5194acd45", "sighting_of_ref": "indicator--3005d3a8-9d9c-4b10-953e-149dd81a6d45", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13f2471-5fe6-4067-809f-c32df5ade68d", "sighting_of_ref": "indicator--c70d1e27-db22-444e-be8a-765368404892", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fddda6c-a2fb-4bf5-b0d6-265de5647d71", "sighting_of_ref": "indicator--f6477470-1982-4149-851e-d40d71f2c554", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf92f291-720b-4c11-86e5-edc180075f5a", "sighting_of_ref": "indicator--cb100e3e-d3cd-4d46-b6cb-8bf4eec23ce7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c9c0d0-cf44-443d-9bf2-5892eed9509b", "sighting_of_ref": "indicator--f5d82255-66e0-462e-be5a-3927bbdd1747", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044c1a73-26e9-4fa5-ad3b-799c5c9555f4", "sighting_of_ref": "indicator--fa3b71de-6d34-4607-8ca9-3f3eedaf20f5", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0f4742-5bc1-4384-b023-17e1388d0f39", "sighting_of_ref": "indicator--e8a90783-a7a3-4566-826e-46703b8324d9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff81121-5611-4e94-bc88-6a42915dffd6", "sighting_of_ref": "indicator--84f23663-6143-4982-8dfe-97aaba565efc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9dd0e5-47df-4a62-af37-f0a7fff60f9b", "sighting_of_ref": "indicator--0e390006-b759-4af4-859e-1c0f7f62a9ca", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152f862a-0e02-44fa-a87c-4bc53b19e8cf", "sighting_of_ref": "indicator--4cbbd873-fae5-45e5-8e89-873f8e8cf4ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2492baa8-8ca9-4460-9e80-87f7176d2520", "sighting_of_ref": "indicator--8d5f841f-7fad-4c4e-8f3b-0e6a94dc7716", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d7dd6b-563a-4193-aebb-94dc8b96ea74", "sighting_of_ref": "indicator--9e129462-09fb-4253-9d55-148fc325e772", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01af5159-7f37-455a-bbad-428e682d6e1d", "sighting_of_ref": "indicator--8ab0788e-d0e6-4c60-9884-628bd7abd1a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c361d0-041c-4fce-96d6-b4f77fa1ad04", "sighting_of_ref": "indicator--0ab7c28c-8485-4ba5-aa10-efdd1ff8823a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb06021-8e8e-416e-8aec-1ef1d1d97d6d", "sighting_of_ref": "indicator--3aeb9039-7829-46f9-9a7f-084e6aaa6ce8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7975edea-2c8c-4ab3-9aed-b41b9450af58", "sighting_of_ref": "indicator--f1ef0e2b-8f01-4bda-ba9d-ee9518a98657", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fc393c-a2f9-438e-af9e-62841b94d72e", "sighting_of_ref": "indicator--4acfc4f7-5309-4900-adeb-b64ea61c695c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433236cc-bc62-4cde-896b-ac2216e094a6", "sighting_of_ref": "indicator--4c81634a-fa6a-42f5-bcd7-84d32c3bc6c7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d6ab63-0412-4d2c-9644-2a31602ccf61", "sighting_of_ref": "indicator--c515b329-0b01-4d9d-9445-6cd9f71d4858", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55cc7094-4782-4962-ab3b-d3b6ee9a9296", "sighting_of_ref": "indicator--e5a4acb0-938a-4948-a7d9-c5938d2ee1a0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df190bec-c687-4493-8c3b-9c56b2f14480", "sighting_of_ref": "indicator--74f4e3a3-37ec-48d9-9cef-6f3a99ba2b82", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31cce90-e039-4879-ae18-099d7e954607", "sighting_of_ref": "indicator--a6c9da1f-92d2-4784-9f4d-c59bc47b06b8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36a7ce5-1060-420c-ad78-e8b2f900af6d", "sighting_of_ref": "indicator--05642ed8-350c-40c4-931a-cbe53a8ada7e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6fb413c-91c3-4158-96bf-5ed374e78573", "sighting_of_ref": "indicator--40e88429-e735-4502-b601-d144ca6e9058", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39ed3a9-6a40-4160-9beb-613bc791face", "sighting_of_ref": "indicator--ef8463da-3f19-41d8-b15f-dc319728170a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d4875e-4ee3-4e20-8d89-50a90485509d", "sighting_of_ref": "indicator--d4a2b2c8-2c95-4607-a41c-e621d4894e2a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b85400-6970-489f-ae13-7de329ce6f26", "sighting_of_ref": "indicator--ea47da57-f426-41fe-abf0-5b9967fefadf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92ed052-c17d-482b-abd6-ef1711c5b9b5", "sighting_of_ref": "indicator--9887bb36-7d72-4596-a794-be06ecb25b99", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcd0933-2dd2-48fd-8234-de3e551e5f08", "sighting_of_ref": "indicator--e8798cc9-786c-4b12-95c2-7dd005a4977f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f173e01-8b63-4779-98f7-c7b325785c70", "sighting_of_ref": "indicator--bcd80cc0-dd2c-4664-beea-84040207e085", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9adddd1-9531-4dec-9bb7-1741a4545ffb", "sighting_of_ref": "indicator--7936b711-0905-42eb-b6e6-a72082901e59", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06535a4b-f333-4db1-9b76-513d9992aa86", "sighting_of_ref": "indicator--b65e860c-8f4c-472a-8582-15fb0b0c8c1f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3227f030-2391-4740-8bfa-6d493f79ce7f", "sighting_of_ref": "indicator--09584c01-14de-4e8d-a793-46e95656fae0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9c6402-6d07-4ba8-a699-15a8b64041b7", "sighting_of_ref": "indicator--97abdbfa-f6bc-46da-a467-80e11e861e68", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3440bcf2-eb3c-49cc-a062-37ed503d685e", "sighting_of_ref": "indicator--a65df9b5-7f36-47f8-bc20-8ad2f292349c", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378749db-2cd5-4c38-bc59-ca00fe856ebc", "sighting_of_ref": "indicator--09251ff7-3e52-433e-aa25-9e028e47a3d8", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a888fb-cdaf-4f76-acc9-c1b261da8d7a", "sighting_of_ref": "indicator--c2a35d2e-4289-41c0-97a4-c3259a10ff77", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f64d94-69cf-420b-80a2-a94728daf191", "sighting_of_ref": "indicator--ee40ad4f-4585-40c4-8176-5e187995865e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4eb798-ac96-4f3b-8032-da8d1633d2aa", "sighting_of_ref": "indicator--4fc00557-902f-4905-b67a-81b0ffc77f17", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c82332-36ff-4b4d-98c6-b21bcfe74617", "sighting_of_ref": "indicator--d60a42dc-d7d6-4a43-90a3-d07253717620", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47698217-bf0f-4e93-b04b-f1db482d422a", "sighting_of_ref": "indicator--4f6d5dbd-11bd-4633-b729-c57b9b8ec041", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6686304d-b6c4-44ed-9dc8-ebb2a64127ea", "sighting_of_ref": "indicator--722d0189-f5d4-4605-bde5-006b45f7415d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5d5054-d56d-40e4-b938-cbdc6db2f43d", "sighting_of_ref": "indicator--2bee8c98-32e6-47ab-8358-0d55ca97fdc7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4f854e-dc35-4399-9287-fc459ca217c0", "sighting_of_ref": "indicator--3a62e126-b34c-4c6b-99e9-5aa34d4eda1a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b952e2-d1e2-4a14-927c-80adfe84c75f", "sighting_of_ref": "indicator--a8511498-63bb-4520-a7b5-e9885bd99900", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21da9a7-a281-4930-8873-be2e5a411303", "sighting_of_ref": "indicator--a9bcad40-4712-4e9f-a6f0-b0f9cca069ce", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df7d69d-ea64-4fc9-86a6-ea7565f6b016", "sighting_of_ref": "indicator--69b79676-3270-4601-95cd-b6b84c47a3a9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4826e986-b13f-4d03-8e76-c4d699a462b4", "sighting_of_ref": "indicator--886eaaaf-5552-4acd-800d-0d16e049d090", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598c0cb2-89c5-439c-adc9-4b15da1e3029", "sighting_of_ref": "indicator--15a88bc1-4038-4630-a079-f04be1c33e54", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fd7743-843e-4bde-ae2b-9bc524d9b2e2", "sighting_of_ref": "indicator--f2d372d6-1b45-41a8-b1ed-bce584597d61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a54237-5c77-497b-b6b3-7f34da002657", "sighting_of_ref": "indicator--0dad34dd-7a1c-4046-b19c-9b69b2dce1ef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0cdbcbc-d501-48a1-86c4-eebff6efa469", "sighting_of_ref": "indicator--553c4738-486b-4248-a81b-fe47a94ddcd9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d49ae9a-8e86-4d37-adc7-8f4efa891588", "sighting_of_ref": "indicator--725094a9-bb3c-43e9-9908-2ec103488c3f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403f2e6c-e3ec-4378-b782-1375e032e645", "sighting_of_ref": "indicator--e069a064-558b-4c92-aa0d-5e497300b4da", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c995db-1703-4ef8-b6f7-b2f0e5d98914", "sighting_of_ref": "indicator--1e2b1d09-c9bb-46a6-ac53-4d52f6d5dbdc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e2c9f1-b471-4a2f-83b1-f7a5e61c111e", "sighting_of_ref": "indicator--51416a04-f785-436c-bdac-bc139f1376cd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb56fea7-86c8-4909-82af-11aeb72fe2fc", "sighting_of_ref": "indicator--609dadc4-e036-4110-afe3-b47488415718", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1002b27d-00b5-4d01-9ab9-1adc0340c0e4", "sighting_of_ref": "indicator--f7fe22b8-cb5f-4e43-a105-9c64dba027af", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02b7802-0e55-4b10-a4f7-e14f5f5caabd", "sighting_of_ref": "indicator--203b3a6a-7f87-4ecc-879e-7fe8a3f69513", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cc0e99-5923-4618-a744-3024912c4116", "sighting_of_ref": "indicator--e58b2797-42f4-45af-8660-32cfe34289ab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efda6c3a-6a23-42a5-9e22-df5b03f60279", "sighting_of_ref": "indicator--8548a144-0805-4773-b381-2078ff162dae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13d4a61-5a0b-4a80-9549-a91bbf60a148", "sighting_of_ref": "indicator--75d0cb02-8046-477c-8178-1495b5c727e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f89eaa-cc26-453a-a418-06af0775948d", "sighting_of_ref": "indicator--dc061527-d138-4e5e-9804-0bf1f32a7fb3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d64d07-53c1-4559-9a9f-f17e03788964", "sighting_of_ref": "indicator--11e92632-daeb-4a77-85f9-365477d6d7c1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0f7096-646b-4487-818b-ce32533058e9", "sighting_of_ref": "indicator--c9c14870-15e1-41e4-9b99-e759b880e2af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846c922f-5cf9-4bb1-9e8c-55e49e546c6d", "sighting_of_ref": "indicator--ff3b1b63-47c1-4935-ab97-a3d8a0b9ce04", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414cf7c1-3bce-4561-9f71-764adeb92f8e", "sighting_of_ref": "indicator--6c9492ed-ba16-4d61-b8f7-81ebb3a0dd56", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a57cfd-78fb-4489-9d1f-57b20d3f6a22", "sighting_of_ref": "indicator--1cd683c9-4135-4e0a-957a-4476caeb715b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baed8b3f-bdf8-480c-b28d-d924094544ea", "sighting_of_ref": "indicator--43d968a2-697e-4264-bece-ed163550a8c5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d66d78-fcbf-4a7f-a52c-e20e2f9022df", "sighting_of_ref": "indicator--73a2b68a-d388-4fd9-836d-945e71dbd3ff", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a146d49-e122-45a5-94c2-fa3719b03afe", "sighting_of_ref": "indicator--6ab80176-74aa-482c-a229-90d36ea0ea49", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d41581-4bbf-4ad0-878f-8a21aab46725", "sighting_of_ref": "indicator--7807b0a7-770a-4caf-aac6-5e31da46d6d8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34674ff-8bf1-418b-bc78-adb015ce465c", "sighting_of_ref": "indicator--441ad268-06d3-4d8f-a4e0-b95652b14423", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bff6c7-82c8-4ff8-8bac-70e39d2a26a1", "sighting_of_ref": "indicator--779b2cf2-0f20-42d0-a8e6-1e1a07dd3b63", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841a0404-959a-4ed7-b972-5ec26554dd96", "sighting_of_ref": "indicator--49de56e7-581e-44fe-a303-3c8054785c0a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49da1e4-f575-4714-b546-e7653f568cca", "sighting_of_ref": "indicator--7f3081f4-e8cb-4a41-be2f-4234b3a3366b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51e5988-0ca0-425b-b714-59c8145f03a7", "sighting_of_ref": "indicator--b97b7990-b926-4648-897b-a2150ad03145", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af13cd14-be27-4bec-979d-f7137e12f69d", "sighting_of_ref": "indicator--adcaeecc-e5f4-4660-859d-ea011dbaca94", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a50245-ac0f-45e6-8d6e-1a5cb3ccbf09", "sighting_of_ref": "indicator--ce944a67-96f9-4c29-938e-e88c849990bb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecf2e93-94c9-4460-9179-e5cb666db6de", "sighting_of_ref": "indicator--fd6fdbe7-ff1d-4542-b827-faed59a52328", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7420fdb5-ae4d-4eaf-8697-3f1284a48fbf", "sighting_of_ref": "indicator--7f2a387e-cd4a-4dc9-87a6-8b1fede7dd4f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d6d678-76ea-490c-b4ef-078e11fb7ebb", "sighting_of_ref": "indicator--e1c7b328-92b1-43a3-af2b-5fab80895dd5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbb4b07-23cf-4d14-aa41-1bdb02f8dbee", "sighting_of_ref": "indicator--d0c02584-b12f-42b6-88c5-351901882130", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992c0f81-5247-426c-b8ef-57ef08b6f352", "sighting_of_ref": "indicator--af29ee55-b887-4609-b3a9-748791d55afc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db3fd32-2866-47ab-8b59-9989e755c86f", "sighting_of_ref": "indicator--c5d32b95-ad90-469d-ad22-f8029a371943", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831e5748-bbfb-4176-8d58-f009ecb2edb5", "sighting_of_ref": "indicator--4c534e8c-8a6d-4c54-97a1-c4beacb88240", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b97b49-70d5-4a2a-b264-824958b18955", "sighting_of_ref": "indicator--c0d2732f-1bbc-4c24-bebe-26be9ba836ff", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd4204c-d250-4c03-9e5c-ab0ad2ab9fe1", "sighting_of_ref": "indicator--c6a1c1b4-2b9d-46be-849a-72a9dc28a36b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93dbcb60-a8b5-4802-915f-fbe83f94561c", "sighting_of_ref": "indicator--e87ac026-e389-4f41-93db-aeb94d566490", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afd284e-aacc-4ce5-846b-58d9cb578e85", "sighting_of_ref": "indicator--30152e1f-1fc4-4785-a2aa-f28b30ac14b0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2619546-bcda-4ee4-9e44-72936130fb71", "sighting_of_ref": "indicator--dcdc056b-b352-49c4-9f13-c184fc80434e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b92222c-2975-4e70-a047-c50c919d7c3c", "sighting_of_ref": "indicator--a591bd6c-c4d4-455d-914a-dc9ef31aa448", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0c94ed-98de-4329-87ca-323937e13321", "sighting_of_ref": "indicator--8099829e-c541-40aa-bd6f-08d08f7c7a09", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37d58c2-c702-4c5a-864c-64fad0418396", "sighting_of_ref": "indicator--d0ebe0b6-8563-4599-832d-2e14a1f3b0b8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a007babc-b286-4183-9ff3-0f2831b7eb43", "sighting_of_ref": "indicator--e0123233-7902-46ca-90f0-1046041fd0fb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa4adf6-9940-4314-b688-882192b283de", "sighting_of_ref": "indicator--0842a14c-bf37-47f3-ad1f-cb815b6e6edd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f18598-ceb5-4bfa-bd2d-1db79520d28c", "sighting_of_ref": "indicator--657785a3-b4a8-439e-a1f3-2ad3b5793251", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25605d1d-f6a8-4abd-b221-1772355fefe9", "sighting_of_ref": "indicator--ae466538-1c4c-497e-ba66-c9e079392e83", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fa0976-0962-463d-ba2b-d8ce8d9792a6", "sighting_of_ref": "indicator--6334fb10-1437-4718-9cb9-15b15d19b6fa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be69e3ab-a197-40a9-9faa-340fd4a92814", "sighting_of_ref": "indicator--6334fb10-1437-4718-9cb9-15b15d19b6fa", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cad5cc-8bcd-4b97-bb90-8302725b2fba", "sighting_of_ref": "indicator--6334fb10-1437-4718-9cb9-15b15d19b6fa", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1432e249-d9e1-486f-9945-20106bb76bcf", "sighting_of_ref": "indicator--186b77ef-17b7-48f8-b47f-09173f861ea9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0f682f-7721-4a20-8ea0-ef7bf5ebf47c", "sighting_of_ref": "indicator--d2f4fb00-b3e7-4a08-b5f4-50ef21607270", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df6cde3-2877-49dd-8b7b-9841b0550f42", "sighting_of_ref": "indicator--11b8b898-fc2e-4cae-af43-79b08cd5cbb0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee18230-8e39-4b21-a7fd-4b84e5d37228", "sighting_of_ref": "indicator--4559b071-f9f3-4e92-b46f-1fd3930b67bf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918a0348-6dfe-44fd-aafb-5fadd3698481", "sighting_of_ref": "indicator--feabf009-98d5-4236-b08a-70350c91923d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9132d730-6313-4cf3-9758-3d584f9f1f1e", "sighting_of_ref": "indicator--7277a3df-1e2b-4b07-ae81-22b6e5189dec", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e0f0f0-2425-41b8-aec6-59539d96f9ec", "sighting_of_ref": "indicator--a17a3376-f365-41b1-9c35-1d9ad2a63e4b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d675df-4714-479b-81cd-413a7d8400e7", "sighting_of_ref": "indicator--382e4d27-b6f4-4b43-add3-9e5c6d557ce8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d531da-e11a-4866-8397-72f97f080646", "sighting_of_ref": "indicator--740c61e7-af32-40a2-a00e-3826a47cfa31", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc839bcc-9e43-4473-bbfe-baf731b6b132", "sighting_of_ref": "indicator--dd11da77-f6f0-497a-8179-3910bcf494de", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b391182-4cb0-42fe-9eff-e4b5d5ba7396", "sighting_of_ref": "indicator--04470262-d41e-448e-b9a8-aba7c18398de", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09484a10-0ab2-4150-ab6f-e1b442dc95df", "sighting_of_ref": "indicator--213ccab8-f291-4d6d-af98-a5938a35c07c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260df388-7cef-480a-bab8-3e74c79db029", "sighting_of_ref": "indicator--a230f474-dc68-417c-8070-98fbc08acc2f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f63d7e-f214-4ada-b1e1-dab9836ae119", "sighting_of_ref": "indicator--8cfc5b7c-d1e5-44c6-b925-08414a8cce16", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77cae5f2-d184-449f-9f08-796c06819c97", "sighting_of_ref": "indicator--5ce4241b-0f97-431d-82f7-6f1d0602761f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d79320-b24a-45d2-866d-97b8628c080a", "sighting_of_ref": "indicator--36e7bee2-5a9b-43d1-9517-bf0f90b4bdf7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023939e9-fd02-43d1-b2e3-796ed8aaef6e", "sighting_of_ref": "indicator--92e9eb8b-c7ca-46bb-aaf6-81dca9758fb7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d14204-9cdb-4fe3-b4ed-f53d5e9a7bd3", "sighting_of_ref": "indicator--80cc0c0c-31b1-46d3-8088-a57d963304aa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111b83ee-e4e3-43ea-a6cf-8262f0c5a459", "sighting_of_ref": "indicator--dc5cb80c-d3da-4688-a3c1-616cbb143aa6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64f73d8-ef60-4a1b-a94b-d0d58713ecf6", "sighting_of_ref": "indicator--fbe336a6-d017-4ec3-a5d7-8057e0dee7af", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9740f8-a477-4243-9115-5c01c084fe45", "sighting_of_ref": "indicator--49b8fa71-d650-4b63-a0c1-4fbd28cf4ce6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92547ae1-12bc-4886-a023-8dff7ce44597", "sighting_of_ref": "indicator--7af3b231-b40e-4f23-b6d9-3fad96f9f470", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957fb7a9-f4a4-4359-984b-07dc06aab26e", "sighting_of_ref": "indicator--b1211ec9-8be2-4a7c-aef0-fdbda8a5c47f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc35181-4dad-404d-8d90-7bd4207bb59b", "sighting_of_ref": "indicator--dff88818-1f07-452a-8c6c-398672fc7d55", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5e8e0e-1d07-458c-89cb-ae6f5dff0304", "sighting_of_ref": "indicator--409bd5f8-77fa-43c1-b3ca-17d831c1b724", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2a5011-b6b1-44e8-b29b-21aa45d3e513", "sighting_of_ref": "indicator--2237d773-6f84-4c8c-b501-1ecdc1143c82", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06d885f-3e2b-48e6-a0d3-6ec6f9dfd559", "sighting_of_ref": "indicator--8cbd3b02-7261-47f8-a141-bab931adac7b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11dc17b-8813-4e98-aa79-237e4bc077ff", "sighting_of_ref": "indicator--7b0a9014-e222-40b1-ab3b-478b37123113", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d70465-20c6-4e16-acf9-b14415ae2b20", "sighting_of_ref": "indicator--9507b996-50c5-4d6b-a3df-093143a46642", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e22fce-a76d-48d3-94f1-0c2b07454a6a", "sighting_of_ref": "indicator--25b8e69f-6e59-45d3-9b8c-7b6526a3df13", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1855ef-41ff-49f8-a20e-0107e082764a", "sighting_of_ref": "indicator--4099bc14-8add-496d-8e17-ae03e8a471ef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4fbc4ea-2ad5-45f4-a680-07dae2b00d78", "sighting_of_ref": "indicator--e7194818-6113-4fe3-8b7b-9f1ffa825a2b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae168e8-2a0a-407d-8435-87624a1fa854", "sighting_of_ref": "indicator--35980afb-8011-4a5a-a7f4-2a0fad899b69", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284f746d-f7de-4231-b319-0cd916a1396f", "sighting_of_ref": "indicator--e00f3ca7-f56d-45be-bbcd-af88e3ab250e", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a876fcb-70c9-46ac-948e-dd73f3153b8d", "sighting_of_ref": "indicator--58f1db0a-4938-4c2c-a141-52eb37950d1a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2c01dd-75a5-4b89-a273-e7858910266a", "sighting_of_ref": "indicator--da05b906-5122-4e55-83ee-ba9fbec23405", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e770241-9d12-4ee4-9c2d-b5a0a3e8a571", "sighting_of_ref": "indicator--dfb600a8-182c-4f09-8bc4-4c7fc6a47bde", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c354e34-dbda-40b6-84f2-d4dd6b1b1fec", "sighting_of_ref": "indicator--2426009c-dbe6-4984-a60c-4d2a369ccff1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80879f9e-41f1-4440-98df-082b979b7e06", "sighting_of_ref": "indicator--85c06c08-356d-48c6-9764-b57fcd277518", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef822d03-8017-4167-b1a4-e90a780edd96", "sighting_of_ref": "indicator--fd8d08b7-9778-4cfa-b1cf-45d7b60bba31", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bc540e-726a-4fdf-aef7-7557d76819ea", "sighting_of_ref": "indicator--c9ab8428-0a85-494b-b801-f02ec225d4b7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1090a5ce-e8f8-4de5-ba8e-14abb3075f41", "sighting_of_ref": "indicator--8b149b2e-7e6b-4643-9021-ce5806b0e10c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3cec9b-ba1c-498a-a539-f6c29c07fc61", "sighting_of_ref": "indicator--b6a327d9-37bb-44af-a2dc-24c9ed3f294a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afe69e8-002a-4cee-985d-c8a9a1262d3d", "sighting_of_ref": "indicator--f0bd3502-6471-4895-b15a-5a43d16dc270", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a73b698-b556-49fd-a104-1a2d155fe67f", "sighting_of_ref": "indicator--4ed6613e-f8a0-438a-b8f6-1173a90b1c63", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706101ed-0887-4ec9-9249-86ca39fc8c89", "sighting_of_ref": "indicator--6895ebb9-685f-44ec-a844-e1b724e7ad52", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb685a4-9323-4776-9b0c-956b467f2b4e", "sighting_of_ref": "indicator--67627644-02b0-4912-92fa-8d5e506095f5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c05433c-4f98-401e-9ad9-2df0efd1c4c8", "sighting_of_ref": "indicator--ef9777dc-81c5-4953-a445-7832670bafb2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3502ad7c-5c78-4169-9e05-d8e9012c80f7", "sighting_of_ref": "indicator--55cd2425-7dcd-4de0-8001-9be2c8e5c4d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621720df-02a1-4d4c-85ae-1f77bcafe703", "sighting_of_ref": "indicator--dd164e7d-ec7b-4b87-afa6-e39a63b5e567", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4339e0b5-a441-4f30-8bf7-ba20565d6b04", "sighting_of_ref": "indicator--08321a96-4c4a-4d0e-883d-b1cc7a9502c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54aea44-f635-486a-90e2-2a39da90f4b0", "sighting_of_ref": "indicator--45c1de9d-932c-4bc5-b536-0f27e227dc13", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf94d220-119e-44b9-aff3-cefe70ad7436", "sighting_of_ref": "indicator--0b7b1988-57e1-4814-b950-5d9bf56e14a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723ebcc1-71cf-48ed-92e8-414a27f2204e", "sighting_of_ref": "indicator--926dfca4-0b07-42b4-87f7-bf88c5b3b153", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3a4b99-91db-4d96-9b01-bd56a95e2904", "sighting_of_ref": "indicator--cacc8069-e30c-49b3-8ec9-dfe17c213a08", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d14c825-cc70-4522-99c9-b0af9bfb48a5", "sighting_of_ref": "indicator--f81e9139-7a4d-44dc-8af6-fb94a5df23ab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450a5f82-8b31-4133-945a-c563e7a8538d", "sighting_of_ref": "indicator--da02cb73-9a11-4c9c-9f78-8b2485846c03", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987d5d40-d3ff-41d3-b298-480f8c53547c", "sighting_of_ref": "indicator--c596687c-658e-4a81-b891-02b746cc2807", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1d4b20-2ac2-4f1e-b1f7-bb8b1bfd4237", "sighting_of_ref": "indicator--7656eb06-0d31-4c1c-a756-de00275ba8d5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aae654a-df5b-4c61-89b1-4d85aa3e69a9", "sighting_of_ref": "indicator--44b75bbb-0572-4044-a4ad-f253c38347ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da07a4e9-a8ca-4b6f-a6dd-e5c8f8240f38", "sighting_of_ref": "indicator--fecacade-666c-4386-83cb-bcb32be63d45", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef8483c-a2ee-43b0-b1a0-caf0e0c29afd", "sighting_of_ref": "indicator--a654ad2c-0270-418a-a5d9-241fb7318276", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e21f1c7-08f0-43cb-85cd-612fdc651b4c", "sighting_of_ref": "indicator--5e7b1994-de75-45f2-8684-0b7ffe2175b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa8e4d6-519d-4f0a-8f40-dea4147559b9", "sighting_of_ref": "indicator--691d82a8-cb6c-4865-8806-be2e83553708", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256bad01-3490-479e-8f91-44aaed6dd4a3", "sighting_of_ref": "indicator--fb06da74-0de9-4131-b405-720f9d771a25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8482b99-41b6-44bf-8a15-a0a271a9b4c0", "sighting_of_ref": "indicator--5b843d71-bedc-4dd0-a8cc-5855462f2646", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d01c3ac-ee64-4250-ad87-cfe776b561fa", "sighting_of_ref": "indicator--b6cb92b6-f544-4bc9-a44d-c9aae978e5f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6465cdcb-f4a9-4ed3-8f0c-0f32a47ce1fb", "sighting_of_ref": "indicator--920a75f2-fad3-4b28-a195-8c84ab438a9c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25d087c-d271-43dd-9216-f61a4bf60204", "sighting_of_ref": "indicator--e2c9eecb-b039-44af-b161-a58d516bd66b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4fdbf17-8f2b-4d89-b143-52c6f7322ccf", "sighting_of_ref": "indicator--83b7e1ef-2da2-4856-8a18-f69faa563d0c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a834b7-1d33-4143-ac98-00371c3eec1b", "sighting_of_ref": "indicator--57072264-d6c3-406e-9042-b80834150703", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335e24cc-cca9-40a5-83b0-8323d6d40679", "sighting_of_ref": "indicator--763d1a1e-3414-4209-9ca3-2b201f2b0af5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195d8f41-d89d-483b-a366-8aca84f36faf", "sighting_of_ref": "indicator--cac42cf5-1cf5-4ea5-b4bb-2949859f733b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cf5e14-75ea-4055-9ad8-57a1bbcdacfc", "sighting_of_ref": "indicator--ec88aa9b-0af2-4029-8daf-93fcc0b73e35", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196635fd-ff86-4932-821c-c0c9ee8226ed", "sighting_of_ref": "indicator--66ff7916-bd22-4bf1-8388-f8251139a91f", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bcfa69c-103d-4c72-ab4a-fb9858123413", "sighting_of_ref": "indicator--43926f72-4e63-4498-adf0-c2fbdbb20d8c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3458d0-d789-4344-83be-ba5430341bf7", "sighting_of_ref": "indicator--ac7a0758-7fd1-4b23-896c-0019d2375024", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251c96c5-6735-46c0-bded-f6270e87142b", "sighting_of_ref": "indicator--b6a1a997-514a-4196-9d00-1c7e89cf4020", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3633937a-7963-4648-801e-26a8f89f2705", "sighting_of_ref": "indicator--13032727-1cd3-4966-97d1-527d3cd20fc3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd30d63e-bde9-4787-8ba6-252c338dfedb", "sighting_of_ref": "indicator--53a1159d-f185-443f-99a7-14930e0c89cc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a953cb8c-fa66-48df-a88b-3548512e2941", "sighting_of_ref": "indicator--7a55d94f-a081-487b-9633-2a6225a8fe2e", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295ba067-370d-4d61-9118-7d1ec821459f", "sighting_of_ref": "indicator--5e03d117-35f3-43b1-8513-7c5f32cc8195", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2b5395-27bd-44ba-8f79-4dfac1718556", "sighting_of_ref": "indicator--f4efb328-5443-4d76-a9fa-6dbaceb803f9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b78e31-ff34-430b-9349-3e9524cb7d38", "sighting_of_ref": "indicator--af096dde-9de8-4751-93fa-e70bab950b18", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a8c3d6-2d00-4406-af3d-3f99c01dd758", "sighting_of_ref": "indicator--90990850-8aec-4abd-a2d5-309b0b908d94", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1b0180-7c24-4ee6-8867-905b3cc6d625", "sighting_of_ref": "indicator--cdb68ca4-3c8b-4fbd-a804-245397a348fe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c120437-289a-4d4c-942e-5c35699e9d4b", "sighting_of_ref": "indicator--0418f895-72df-49a4-91e0-1612b93009dd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f861394-fc93-49db-9c3b-8c3aa5083d45", "sighting_of_ref": "indicator--6eacc43f-f6ba-43e3-9f7e-bb84bd558900", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8722d6-1627-4044-8d0b-0a85db9e6529", "sighting_of_ref": "indicator--b2c34f28-327c-493a-a996-66fafb1fbc8f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2e657a-26e7-4fb9-8771-3fd862889408", "sighting_of_ref": "indicator--be27551b-ed65-4500-aa47-c57452a91218", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7daafa8c-3428-471a-b1ea-b0e6a0d19e86", "sighting_of_ref": "indicator--ee686a93-16bf-4c29-b035-69e3e59a573c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda99292-9ad1-46a2-8e0c-ccbc9806a4a9", "sighting_of_ref": "indicator--5895e8e3-8a3f-4c2f-80ad-33ca664790bd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9ba51d-a2e6-4725-b330-0f85a0c6b4e5", "sighting_of_ref": "indicator--6b55d69d-528d-40b7-8efe-4a3771ec23a6", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1627b1d-ac6a-4afb-8a82-5f47f7d0a8f0", "sighting_of_ref": "indicator--c95321d7-efa6-4f7f-9a56-f8eb6fbaba00", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630bd225-3dfe-4b59-a372-473f44cddfc5", "sighting_of_ref": "indicator--286ec209-4853-46ae-8132-5a183dd71577", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c005cdc9-9a52-4815-b83e-ef678532e1f1", "sighting_of_ref": "indicator--ad62e999-ae61-4229-a3ed-ae37c86da7e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806e0433-b9db-4107-aeac-cb78931529f2", "sighting_of_ref": "indicator--b24c3e72-c84c-4c6e-abb6-5186a792bf83", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076a36ac-6f99-4e09-a8ab-c47c75fb9109", "sighting_of_ref": "indicator--951d2314-7afb-4154-acd5-6e07ab536673", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff177b9-13ed-473b-a2ab-afbbd3f436fe", "sighting_of_ref": "indicator--1ba91144-9304-4d13-8363-57685c1dc4ab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba498f4a-3a9e-4885-beae-c68eb41dfef6", "sighting_of_ref": "indicator--810a323b-ecb8-4832-b7bc-d8623478c4af", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39add6cc-7107-4944-9399-77bb371d4280", "sighting_of_ref": "indicator--bdd9d7b4-a4d2-4030-bfe3-fb84d7c6e621", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1c3ba6-da18-4d85-af3c-355002404cf3", "sighting_of_ref": "indicator--efb38da8-9397-4fed-b543-9b0f836a271a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa404ea4-49bc-4bfe-a226-57ac8a728530", "sighting_of_ref": "indicator--1b048bdf-3bf5-4ef2-ad10-1d7c8900e3e8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1c35db-e4fb-4b85-bc6e-079a2d3fc259", "sighting_of_ref": "indicator--7993559a-7a34-432b-a75e-5769ed651f46", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392ad731-afc0-40e1-845d-d43061c361da", "sighting_of_ref": "indicator--b4f6434a-8192-4ec0-b065-ac280348a47e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791a28c7-a429-4984-b2e4-0a192235e1bd", "sighting_of_ref": "indicator--89a9aed1-4bcd-4c39-9970-150fb01ff27c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4640b49d-ceaa-4edb-aec6-e4bf020e0159", "sighting_of_ref": "indicator--d5b75baf-a037-4246-90b3-245e1656c1a7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea80e06-72f2-4445-b654-ce9cf3a23f87", "sighting_of_ref": "indicator--8a28b195-5e8f-4203-8029-6b0a79348a69", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3461b6e-f326-4d3f-bdd0-6d16cc34dd29", "sighting_of_ref": "indicator--d037eeb9-e7af-48bd-a900-3bea1192d40e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3ec38b-a08f-4172-8385-c708cb51e179", "sighting_of_ref": "indicator--a97a62c0-31fb-43d0-b42e-df90e470ba9b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41ab9ba-0c00-4475-a0a7-366171196794", "sighting_of_ref": "indicator--293ca1eb-c2d8-4cb9-8982-76afe9968757", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef84e2f-5ecf-4169-836b-f0f58103a4d9", "sighting_of_ref": "indicator--4b9a4f33-3ee1-44b7-8dcc-6550dabe3061", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdb7fcb-fb42-4309-8fb2-bd10b5497ed9", "sighting_of_ref": "indicator--3f2cab00-4d11-4630-b328-0d4826ba4c11", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f26806c-fd81-4e4b-bf27-7a2cffe86bd7", "sighting_of_ref": "indicator--2df082f0-44a2-46bb-9d64-f50430d6a47e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c32bfe-e080-47d0-8539-bdfd1085d3d6", "sighting_of_ref": "indicator--b9ae6724-7075-4479-af21-7ac32a14a7e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f625d0b-a487-420c-ac6f-2a5ee760b8f9", "sighting_of_ref": "indicator--cd918f83-017e-4f9a-acb7-8fc5ec826e35", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3498d53-148d-4bf7-9047-667676885ef9", "sighting_of_ref": "indicator--46e1587b-b929-4680-982b-e7910acb26ff", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0affca19-ce61-44ee-a0b2-836b3b962624", "sighting_of_ref": "indicator--6a497336-7c7f-4743-aba1-b5990c3168ed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1dfda5b-63a9-4876-82f9-28aa7f39959b", "sighting_of_ref": "indicator--186ddb51-a6c1-45e8-8c6a-5d9ba9f86c39", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813fbab9-5849-42f3-a357-1d69b7fe2d0d", "sighting_of_ref": "indicator--03eca8c4-82ae-42c2-a71b-1e7b58b7723f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51ba71a-15cf-4e71-a2fd-dc99aa9dc25b", "sighting_of_ref": "indicator--4896fa29-f78e-46f2-a99e-253c06f42244", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1382f6f9-020d-4697-b8c4-f830ecbe6974", "sighting_of_ref": "indicator--8d03f81e-1b31-493a-bcb2-ee565065383e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729a4924-4162-40d4-8264-44a4130c56ca", "sighting_of_ref": "indicator--5be34ece-bcfe-4775-890a-8c1612fa00ff", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd5065b-a5c6-4eb3-bdff-fde5f0e66aad", "sighting_of_ref": "indicator--4039a8ac-ce46-4440-a134-0232477c55c3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa938ca-7fbb-4d5b-9953-d6882f63c41d", "sighting_of_ref": "indicator--8eee94b2-c8aa-4499-9be7-07da152ab7e9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84b82a1-04bd-499e-a700-f95c83e52b4d", "sighting_of_ref": "indicator--e32461b1-6ed3-4f16-ba58-5e6aaaf4ee78", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa35d72-3c17-4d85-b0f0-3d4a8865a1bf", "sighting_of_ref": "indicator--8d62c8b6-b2ce-424d-a47c-9627bb193d42", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0de601e-abc7-40e0-98fa-725073a5522b", "sighting_of_ref": "indicator--19dd7d3b-abf7-485d-a37d-06fc6da1ea29", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5764567-82a9-4633-a527-449569b810ac", "sighting_of_ref": "indicator--dfb9e693-1828-45ee-9c5f-89b2b3bd543d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef800ee0-bb3d-446e-9d45-cc237b16bcd4", "sighting_of_ref": "indicator--25eca3c8-80eb-4b7f-80dd-de451b1f00cd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174d24ac-3fb9-473e-be92-38bd3437e6f8", "sighting_of_ref": "indicator--5513a6e7-e584-40d7-b5e3-6c930c9ae47a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43a9302-132f-433a-b29a-173b007ab49d", "sighting_of_ref": "indicator--0082884c-9544-4b8b-bf77-6bc121222b28", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79832c8-b8de-45f3-a2a9-d131bca9f06c", "sighting_of_ref": "indicator--ceda3290-3fb6-4264-9e40-037f94b943a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d646a8a-06e8-4862-82e9-a75afaa250c3", "sighting_of_ref": "indicator--43acc7a6-7145-4a87-aff3-d3eb92fef2d4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3bf3a47-20dd-4b46-aeb7-75500a6a5892", "sighting_of_ref": "indicator--f69d188e-be44-4321-8581-9e9abc1a8280", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd45cfa-4b63-414a-bcb7-ea76eafa2f84", "sighting_of_ref": "indicator--887d92c6-8ad9-4b94-a370-03687b5c69c7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2200330b-af22-47a5-bc7b-472d528f9cfc", "sighting_of_ref": "indicator--9d28ae39-4d81-46a6-bb2c-d95af617473b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c260c816-ed3e-4b73-a6f9-3656f508466f", "sighting_of_ref": "indicator--69068eb3-7f1b-48a1-9967-ed6cee330382", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caec77b2-8e66-4057-9d93-f1884715b0a8", "sighting_of_ref": "indicator--290caee5-0d8b-41d9-8118-b0df97c147da", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0865c3b-5d8d-4ff5-9901-ce90ce5d28bd", "sighting_of_ref": "indicator--a9612c5d-733c-4248-b94a-61185f8faf16", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659f7280-6961-49a4-8b1f-0bfb78807887", "sighting_of_ref": "indicator--12a40595-7847-4f6d-9085-710eeefd4463", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c1f455-6269-45a2-8734-66343dbffb55", "sighting_of_ref": "indicator--f15d3d9e-687d-47f1-a73d-f0d9c47b1988", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fd4953-3932-48de-9c30-25f10f594ccd", "sighting_of_ref": "indicator--270f67e8-05ec-406f-9aeb-75e121f05651", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cbd948-8a01-446a-801e-10c7352363d8", "sighting_of_ref": "indicator--315d4388-3daa-461f-9b79-b3407de2268d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb91594-490c-485f-b506-7af0a796925c", "sighting_of_ref": "indicator--ea5ea46c-5520-4628-8925-cb822e4e2c13", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6056d6d-850a-4f28-a6da-76275186dc84", "sighting_of_ref": "indicator--126500d1-c51b-476b-8632-71a0d323f30f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7699629c-ec5d-4d62-bb37-145d2a86f0d0", "sighting_of_ref": "indicator--67266b52-749c-45e8-8a86-9ee5421c8862", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e635423b-8787-44ea-ab45-942e584cb7a9", "sighting_of_ref": "indicator--669a41a9-a3f3-410a-88f8-34eaf4f265b1", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e18316-32dc-416c-ab37-8c133363268b", "sighting_of_ref": "indicator--272dfe15-18f2-466d-8258-6c6045eb41a5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bc2cb5-b73c-41e2-8eb8-1ce15aed8129", "sighting_of_ref": "indicator--779e0a66-d20e-4d79-9573-ed179a2bf058", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160b87bb-5caa-4b50-ab72-0503801d6b31", "sighting_of_ref": "indicator--e592ae46-a267-4713-b928-5029c8e0cea6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75fe2ba-9093-42a0-9306-a248e029ab6e", "sighting_of_ref": "indicator--4f177aec-1cc4-4e94-ba9d-86ca4d5a72e2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777b50d7-0129-4b0a-94da-53f0649d23d7", "sighting_of_ref": "indicator--81264a61-d112-4cbf-8f8f-c06ba8c84101", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4efd35-45ab-482e-959a-36c9a58c865d", "sighting_of_ref": "indicator--8910c654-91f6-49b1-b9f5-15486a9343c9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94c2bef-a1c0-4022-b042-6984968f0acd", "sighting_of_ref": "indicator--2d6e509b-2303-487e-a6b7-0202cdaef2db", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad3bae4-1fda-4499-883b-c973417e635e", "sighting_of_ref": "indicator--64a5e992-1d1f-44ce-ba8f-75ced4a3aaf5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab2e44b-bafe-4186-96b4-bf8af107c175", "sighting_of_ref": "indicator--d3982d03-fbbf-4fdb-b9f4-4dec5cef4b8e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2205c295-7103-47f2-870e-e28550f10f88", "sighting_of_ref": "indicator--025d0daf-445e-466c-9876-81a0331cece6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a82b085-1ebc-4b06-9cb6-56ae8206a9b2", "sighting_of_ref": "indicator--e116e2b6-ca7a-4dd0-b7ff-5eb4f4de2e40", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a211269-9d5f-47a4-9225-b08545686503", "sighting_of_ref": "indicator--5bbbeada-359c-40ef-b718-0785f35449b9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf22319-6267-412c-acf3-eb65cb90bf50", "sighting_of_ref": "indicator--97754f38-d123-4cff-8726-43bf53772cda", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c9053e-fe71-4c8f-ad39-6b9e795a28cc", "sighting_of_ref": "indicator--86330180-5cd9-4c4d-a9fb-f21ce96fe5f7", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc0d570-62a7-4436-b701-68e2a36eec04", "sighting_of_ref": "indicator--867ae4c2-a19a-4a53-8b67-dd436bfe283f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267caf6d-7768-4291-a3c6-f8338e63ce6e", "sighting_of_ref": "indicator--2aae8f5a-928b-4018-baaa-12ddde4c7265", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7698761a-2bd5-4c7d-b866-4e7fabb9734a", "sighting_of_ref": "indicator--31a9d94d-158c-4d1d-9107-83256c6354af", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d555da-a338-43e4-ae0d-0955e6b6ae01", "sighting_of_ref": "indicator--848b5d64-a1d3-4088-88cf-0bd60af35ab0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be147499-98a5-43f1-9c72-e4b004c00d93", "sighting_of_ref": "indicator--c6587b71-dcdd-4297-bbab-46d1e216e085", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3b3854-9fef-4110-bb6a-07209564ea3b", "sighting_of_ref": "indicator--ea776dd7-c442-4287-a44a-1a2e870b7eed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28890a65-388b-4e48-8e75-93df64c2f3d2", "sighting_of_ref": "indicator--92fb192e-85cd-4f04-91b2-14798f1ca0fa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69274edf-2505-4f1e-839f-f6317024192c", "sighting_of_ref": "indicator--1dbf7340-451e-49e5-9e7c-c9257b1972b7", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c499a9-80ff-4ef7-b9f1-51a94a3a2a95", "sighting_of_ref": "indicator--152268c1-ae10-4e7e-868e-7a6b9844bc3b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e18945-d7bf-497b-9cb7-9f8f0fd34126", "sighting_of_ref": "indicator--d0dd7a4c-71b0-4c46-b788-a5781ada14de", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9f4ef3-06d9-4395-be5a-ca77bda73d70", "sighting_of_ref": "indicator--ec8028e7-d063-44e7-9f1c-3e546c564f10", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fb0e50-8efb-42a9-8a71-8b534c31b3e8", "sighting_of_ref": "indicator--4248bc32-dd63-42f5-bc1f-a20b4a1c8d9b", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead67e2b-0098-4da9-9077-6982bf882fe3", "sighting_of_ref": "indicator--d48ee236-39cd-41fd-83ad-d66d0b42187a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b38b5f5-f912-40f9-a9d0-e739ee7fc863", "sighting_of_ref": "indicator--19002b70-832d-4716-94a3-c0a6c80a26e0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530ef793-b37d-47ff-9025-55a3fd69ac65", "sighting_of_ref": "indicator--3c7f26dc-c29c-4644-bb13-cfe4b6101d43", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70704e7b-cc82-46be-9dae-707a31b1e28a", "sighting_of_ref": "indicator--ef73b67a-78f1-4522-862d-28d2bad2f7a5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc600a14-620b-4835-bf9e-ad996caa97aa", "sighting_of_ref": "indicator--abc60762-4993-4f5e-afcb-77e6aa87b4f6", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939d8120-88de-4567-b6d8-4e8db48041f1", "sighting_of_ref": "indicator--b831c928-b5e8-4c06-9a1a-1a9e2ada936e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e737ea10-8e7e-4b0e-bd7a-c9550da37f11", "sighting_of_ref": "indicator--a87536f4-d85e-4220-8d9b-16b6f7447142", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf4ea38-10d1-4928-9765-c4878601682d", "sighting_of_ref": "indicator--2b190711-e893-45f4-90ed-c56a0b59588c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba07988-f75c-45a5-baca-22da79e9bf84", "sighting_of_ref": "indicator--8b77d0ec-96f4-43cf-8728-30186e482906", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91b26a6-a55f-49f5-a13d-8a4e2df794ab", "sighting_of_ref": "indicator--7c347508-3eff-4278-81eb-4a25f9c31d5e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d850ae8-8e5e-4f22-967d-cbf17233ed9e", "sighting_of_ref": "indicator--0f34871e-8e73-408d-9c4a-3ed2adb742eb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b108cdf7-9b94-4076-acba-f93799fbbe60", "sighting_of_ref": "indicator--bcd51a4f-0078-4de5-b733-7b8df5678ad7", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2d1663-2a18-4a4f-88ba-dba905753385", "sighting_of_ref": "indicator--0c462184-4c57-4ad9-bdae-cfc3febee7e0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7784a46b-55f7-4bd9-93f2-d411a36e7909", "sighting_of_ref": "indicator--8b98e8be-8ac4-411c-90fd-5938f280ff78", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed96bfa-6b05-4bb9-acd0-df58a6bf0b76", "sighting_of_ref": "indicator--be876a06-d732-41c0-9e81-fa5702c97a4d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948b40fb-3fae-40ce-afe5-1338b5ba7092", "sighting_of_ref": "indicator--ce548534-e31e-4bc6-b750-905c96e22012", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585f8193-3463-4278-b9d7-7aba028390e7", "sighting_of_ref": "indicator--43038bc9-2063-4c6f-b700-1ff40ce56793", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5d7465-5996-4591-a7de-7c0a2c0cfbf2", "sighting_of_ref": "indicator--70c7609e-e7a8-4931-9c39-23f0c0015b49", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67e20bb-fd06-4a92-877d-c97105e5f8c1", "sighting_of_ref": "indicator--65a033f7-07dc-46f7-97a3-10f2e12ed79c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e309728-053c-44d5-ac84-44dd8aae9f97", "sighting_of_ref": "indicator--6fe30ad7-c343-4601-bf80-a5a5b5654adb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583d1676-d4f0-48b3-a48b-0784d38538c5", "sighting_of_ref": "indicator--ab5b29de-ba0f-4608-9bc6-1185442d9ea6", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c2ed4b-05af-4582-a6e9-ff002475586e", "sighting_of_ref": "indicator--e029b0b2-f8de-48c6-bd14-752a758c21ec", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b7241f-07dd-4fd3-8790-3dda99258064", "sighting_of_ref": "indicator--537abec6-3fed-4371-a175-b06ed6b806d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e238c77c-692f-4134-937c-a00695fd860d", "sighting_of_ref": "indicator--a9540d28-5faa-4b7e-8421-68b8f3dc74a9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade53e80-ba37-4f31-ae9b-d5670b6b846f", "sighting_of_ref": "indicator--290ac769-def4-413b-b045-c9f580c2bfbc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be31182f-7b7e-425c-8b13-28130e58ae02", "sighting_of_ref": "indicator--3df56720-2165-454d-aaeb-f01bc0cea2be", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd66f95-04f6-48ac-922e-5a72ca66aad1", "sighting_of_ref": "indicator--81bf1364-4e1c-44fa-9742-c8f19fbfccb2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06073ca-9e5c-4665-9640-3d99f7a2a196", "sighting_of_ref": "indicator--8829d738-34a0-4a96-b29b-eab1ddcc4f68", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1f8536-c555-469c-acac-1f023b990f7b", "sighting_of_ref": "indicator--986a5d90-57de-4abe-a992-51491d8f167a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02de4d39-1c8d-41e7-8836-eab9abca9b5f", "sighting_of_ref": "indicator--1d1270dd-c963-4620-a98d-2448482ab958", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ef2a88-0e55-4c1e-b798-4a7d274edbf8", "sighting_of_ref": "indicator--fce0936d-9af3-456b-b9c2-13187cc0744a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2cad64-7721-4acc-b26d-5c23ca050123", "sighting_of_ref": "indicator--bbba52b6-1b2e-4275-a879-10d7ab54009a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f656a075-8e23-4d95-955e-cd273eb739cc", "sighting_of_ref": "indicator--9af39c5d-18dc-4516-8a67-5843e53cc6ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0d9532-19e2-4bbe-a5f7-15e617dfd773", "sighting_of_ref": "indicator--68c79128-4d26-4933-a16b-9b751ce9b09a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551600e1-68a8-4607-95b0-2c879a04b45a", "sighting_of_ref": "indicator--6a6dfb78-f7b6-4ee8-b471-fff2069ccfe3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61151cd-4491-4ea9-b0bc-0c14c7fd4a67", "sighting_of_ref": "indicator--7394705b-c6f3-4af3-bee5-a344701830bf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36338552-e4fa-4b54-973f-4146499c20c3", "sighting_of_ref": "indicator--e6bdf1f5-6a0d-4117-867e-03fbc6d244ff", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92131904-5daf-4c2c-9319-2c97c2ab0ff2", "sighting_of_ref": "indicator--51e4545a-680f-4b3a-b773-5f074577eae3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6a1816-69df-40b0-a062-ed9dcaa7b95e", "sighting_of_ref": "indicator--8d1a221f-f03f-439d-acaf-cc70807fa5fa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddf858e-ca7c-4c73-acaa-b14d023648dd", "sighting_of_ref": "indicator--81c541aa-9206-4e06-8a34-dc7c278d4245", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f64390-4176-46d9-8074-5e440f80c4de", "sighting_of_ref": "indicator--81dd4941-4834-4d96-9497-9e55952d2940", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07fb460-773f-445b-a7c9-25ecc9c9aee9", "sighting_of_ref": "indicator--f5d8a1b8-eb64-4b65-921d-ebc2ebae890c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c9f0e3-5dba-489f-8841-df5d2c8b0500", "sighting_of_ref": "indicator--b1e71427-f207-4d3c-90df-c9ad4593a21d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ee659f-1895-49d4-a273-30a57a643313", "sighting_of_ref": "indicator--4bb49c76-16e0-4f1e-be6d-c11b5208d8e8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7e60e9-f6c7-4b7c-8488-6b0a2b08babe", "sighting_of_ref": "indicator--7487a829-6f10-4d31-b1f8-9bb78e530920", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951b1866-2682-4b9e-9a3b-d838ea4dd637", "sighting_of_ref": "indicator--e725f2e4-a688-4186-a929-136f8aa52f94", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0770e76-afbc-4173-937a-ba42a77bfb0e", "sighting_of_ref": "indicator--191396b6-7466-4522-9a1b-b020b43ee37d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84d659a-0a90-496b-bf0b-b2eb427d18db", "sighting_of_ref": "indicator--3a1efe15-7e0d-4835-b5a1-4e21b44c3f16", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bce39b-d774-4542-9b3f-61f6dbf2791f", "sighting_of_ref": "indicator--173b962a-e497-4d3b-b0a7-61646436996f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37885210-1fba-4566-b6f5-e1338bac4d73", "sighting_of_ref": "indicator--0be53709-dfd3-44e5-a94e-6e7d76ab937b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ed4ede-6159-412b-9b57-1b93726913bf", "sighting_of_ref": "indicator--ba75f204-9e27-4bea-9e8b-744cd7878e59", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e27edd5-60a0-4701-8aff-e35407749ac7", "sighting_of_ref": "indicator--8321f72b-d152-4574-9d55-465cdd0b532c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e4744a-57c2-45f5-9262-eaf770ef79ff", "sighting_of_ref": "indicator--81a14e37-a8b2-4cd9-8fdc-e44e352768d9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197152f4-7a63-470e-8261-6dc23b79998c", "sighting_of_ref": "indicator--39528d75-faca-44db-9b3d-7dd1f6c898f4", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9cc5ecb-22ce-4cec-acf8-c56ab35af47b", "sighting_of_ref": "indicator--990595d7-fb54-4a29-9c86-4c0ec2e2cc8a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5617ea-91d9-49b1-9b36-8b42e9b73b91", "sighting_of_ref": "indicator--764d56f6-9c96-4546-b224-592c10c09d01", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed64e0c-3782-4285-a3b1-df8901e84c3c", "sighting_of_ref": "indicator--84a0de01-2a5e-4f1e-aac0-6001fd8c97ee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e08a14-77c6-4145-8bd1-81b6b6eb2c80", "sighting_of_ref": "indicator--5f3191d1-87ed-4bc9-90ed-e664039bd83c", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcd6332-8b2f-4d92-9255-d6b272b4c925", "sighting_of_ref": "indicator--2e24f383-9fcc-4507-88e0-49206654e91b", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b810a99-4bc9-46cb-ad6a-7d66c866e071", "sighting_of_ref": "indicator--ab107746-c321-4db7-a0ae-a7d710ff233e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77845c92-0b86-4780-b703-b3dabc963b40", "sighting_of_ref": "indicator--4f11d761-60b4-4784-8a94-3dfec1e02b25", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de3f1f1-aee8-4eea-b642-2c7b0c4c1160", "sighting_of_ref": "indicator--f1254d88-4958-43ef-b799-c2d7780ebc2d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3323743-910a-4420-9298-e1ca1ca0971a", "sighting_of_ref": "indicator--cc21c5f2-1aea-4039-aded-5c81ea85d254", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26796f1-a0c0-446c-a80b-ed701f8156c4", "sighting_of_ref": "indicator--98bef820-d4a9-4d52-adaf-18d76c829bfa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b44cf0-b601-422e-8bd0-9bd6e5756a6d", "sighting_of_ref": "indicator--9512bae8-544f-442f-9449-5a5702414df4", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee9b42c-85aa-4f6b-95a7-4ec8897d0ecf", "sighting_of_ref": "indicator--c434fc14-d56e-4ada-98db-9852615ffeca", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f763cb0-a6cf-455f-96e5-9810cd96f627", "sighting_of_ref": "indicator--3a02ef21-715a-42b6-949b-773a22cba648", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579fd288-daa3-48c5-9653-7767d4640e13", "sighting_of_ref": "indicator--65c879c5-596d-4854-a031-153a5d520cb0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd948171-e839-4fbb-b8f0-c2b9de1d6cc8", "sighting_of_ref": "indicator--77628c2e-0bce-451b-89f2-085404fcc4cc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e556559c-8f6f-4499-ad57-075479419e2c", "sighting_of_ref": "indicator--a72fc4f0-e764-43d5-a05f-c907150eaae1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5651d49-71fa-4a1e-98f4-e2735f71f6bb", "sighting_of_ref": "indicator--e296d113-1e26-4dd0-87b6-6774a78b93e3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326b1c23-7a5f-4230-ae21-7e237c6e1167", "sighting_of_ref": "indicator--58ea3430-fc1f-4697-b504-23d231f80c29", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767f378f-09d5-487e-b849-8c16af4d0e8e", "sighting_of_ref": "indicator--bc30956f-310d-4dea-ab7c-083a1643fdb1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25edb80f-1fb7-4040-a4d1-9ec891f355b0", "sighting_of_ref": "indicator--5b2b1494-0153-481e-b1c0-7eee85368bce", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41a17ef-c7ee-488c-a7a6-415162598aac", "sighting_of_ref": "indicator--07267641-fd26-41f9-9f5c-332721a27058", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c192af6-d0b4-4bba-9544-3c7e31d90d62", "sighting_of_ref": "indicator--644aab68-b454-4197-945e-92e728a97594", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8a85f6-97e3-4554-927d-6386826f2b0a", "sighting_of_ref": "indicator--92ce748b-a244-4df9-8c68-67d40fdf873f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad98a620-f87b-4dab-b77a-4108cccede2f", "sighting_of_ref": "indicator--40e0c45e-06bd-4882-b3a8-960b7a1a8279", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf68d0b0-c004-4a04-8d1b-eae8968d4862", "sighting_of_ref": "indicator--feadca49-7019-4212-aba7-56f98563c775", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ca1207-2318-45f1-8e7c-a3bd479f50f5", "sighting_of_ref": "indicator--51501823-513f-45de-90d0-94c7fa690d49", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e574b939-346d-4355-ba6e-f081988cba8f", "sighting_of_ref": "indicator--9db17b98-a854-4ef4-9a4f-503ab920c9d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ad25bf-a5fe-4e19-aba7-81011a4516b8", "sighting_of_ref": "indicator--181a83fe-d877-4ce5-ba8d-f5fb00ee7ba5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057daaed-658a-4632-bacd-351985b6a28d", "sighting_of_ref": "indicator--30c1d93a-8d7c-4624-8712-613cd6648523", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8aa4d4-c68f-4b44-9556-90bbf40cdea8", "sighting_of_ref": "indicator--8901c242-1655-41fb-b36c-8532e5efeb09", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0485c88b-0669-4b56-943f-3869ec0a2f9a", "sighting_of_ref": "indicator--09a5aa2d-39ca-44dc-a9b5-f0554b092a18", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d822401c-9db0-42d0-b81b-39b39d02b732", "sighting_of_ref": "indicator--f4a0749d-1698-4dff-991c-4fb21559d5dd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c94e57-e255-4b0b-8612-0d3def91c266", "sighting_of_ref": "indicator--91db08af-3d0d-49a5-a667-0fd3dff80116", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ed54e2-63cb-4225-962e-0a5af2143947", "sighting_of_ref": "indicator--0a407b39-dafe-496d-a169-b26089170f6a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c904eb21-557f-4184-9410-52892303ecc7", "sighting_of_ref": "indicator--9113bcae-98f2-43ff-afd5-1363dcbee1fc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d833615-25fa-4028-8d5e-c2b8af5a4101", "sighting_of_ref": "indicator--86e1046a-7049-4fe4-8a77-f1026481c8e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c92e8ab-efe4-4d8b-9c2d-88d5924b1e93", "sighting_of_ref": "indicator--c44064fd-c67f-4e16-bc44-2ac722b4820f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8fae68-3bac-4e4e-ae61-d80def58bddd", "sighting_of_ref": "indicator--63e1a8c5-4136-4689-a4b4-437a7080cdb3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0cb4ef-02e3-4066-9a50-3e05c34b65b4", "sighting_of_ref": "indicator--62dd453a-0da3-4b85-9cca-53709d7af639", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc64581-5464-4b82-b0cf-e05781688371", "sighting_of_ref": "indicator--d3c05178-7414-4ebf-97b9-4e7d0d196b7c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61a7d8c-8390-4261-ac48-eb0d90034375", "sighting_of_ref": "indicator--bf29d0f0-abb3-498e-add3-5b6bb43ebbc3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a209a4-e2f7-430b-a39c-75cb73746a5d", "sighting_of_ref": "indicator--42f41d49-ca63-4052-bfb2-5eefae35804b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1e323c-32e1-4f4d-a48d-8bfa0627fb71", "sighting_of_ref": "indicator--2bcd4b52-c5ff-4aec-b976-7d505f10ce66", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1960e654-7cad-4bdc-8666-449c5ea3bc84", "sighting_of_ref": "indicator--2bcd4b52-c5ff-4aec-b976-7d505f10ce66", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9ca39e-6d65-4262-be7b-3e6e6fdf5cc5", "sighting_of_ref": "indicator--0f758dc5-3430-403f-b660-a5b279bbb139", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866b2be3-ee8e-41c5-bb0e-23b493bb4fdc", "sighting_of_ref": "indicator--f939e908-c11e-4478-b8b0-0831aec70181", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13dc450b-8ab9-46f1-836b-ccede034fea0", "sighting_of_ref": "indicator--8b112a27-e540-4818-befe-0216558ee71b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308600a1-9c02-4350-869d-e034dc221231", "sighting_of_ref": "indicator--57b61b2d-5a7b-4aed-931c-b45adf46d718", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad833e1-f4ce-4eb1-81ad-560bfd5d75cb", "sighting_of_ref": "indicator--53b68928-9140-425a-bf7e-5c9c81af357b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09916983-2532-452b-9e60-dda20c48de36", "sighting_of_ref": "indicator--8c1c117c-ca20-44a7-97df-c31e8b96cc92", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9355de-20b5-4dcc-ae93-92678b846100", "sighting_of_ref": "indicator--68256305-8985-4ad2-a30d-529a75c3d674", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ea94d9-fa70-481b-b28d-ba3a395a11b0", "sighting_of_ref": "indicator--92e23911-8ac8-46a0-ad26-1e6587134342", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ed7cd8-71eb-4856-89b6-6ce881997fd0", "sighting_of_ref": "indicator--f8331611-cf15-419f-9ec3-252b45eabef3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0a0593-8dbf-4b9d-8efc-64a5517185a4", "sighting_of_ref": "indicator--1a01312c-ab74-4b98-b9e8-4be3bdf59b1a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38e29c3-ab73-40a4-83b1-689ff92c706a", "sighting_of_ref": "indicator--11030ed6-a59a-4ed9-a52c-b4d55cb1fa20", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570dc8fc-7cd6-45e9-96b6-1e3be516099c", "sighting_of_ref": "indicator--65997cc3-1f6f-4887-8f71-1a513bb36783", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12052263-0672-4570-9580-cd00320a7902", "sighting_of_ref": "indicator--0db0cbc1-0ea7-4951-9889-0523b2b095f0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d83dee3-b31e-4dce-91b0-23000dabe356", "sighting_of_ref": "indicator--5a48fe41-3217-4809-ac28-88d057e70192", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497a66a4-7ffa-4863-a5cd-854d6c2e151d", "sighting_of_ref": "indicator--c3dba5c1-3297-418b-a096-810cf7d99780", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870403ce-cf95-4de1-a94b-79135abedc26", "sighting_of_ref": "indicator--d79bab5d-a363-4fa5-97c2-c3f7e41e9d5b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61898b8d-5611-4174-88cc-7b3f74427dfe", "sighting_of_ref": "indicator--771871c2-9119-4704-813a-52f9d1cea8b8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69737d0-0693-4739-a0b1-854036fcd70f", "sighting_of_ref": "indicator--f634f73d-8b1b-4b00-843c-c6d2bcec445d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95901559-01c3-4786-9ace-9371778e0493", "sighting_of_ref": "indicator--4680111d-219b-4805-b4c8-ea0a0fd48b9e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d526568b-1f1d-4da3-84f5-77f064864d32", "sighting_of_ref": "indicator--d9ec407a-e97c-401f-8a1b-3e9de83a4dfc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0221074-1e21-46d7-b04b-41d973461572", "sighting_of_ref": "indicator--768be84e-8a9f-4779-95d3-c7126049cc4b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7f08d4-81f8-48e7-a052-1843b6930241", "sighting_of_ref": "indicator--5f118f07-2c3d-4c81-b10f-dc189c212e9a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d50952-b797-4de7-9bb0-95d641940833", "sighting_of_ref": "indicator--c68b1704-8fbd-477a-9a89-120e3267931e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e27d89-5c90-40b1-aac5-3a76a92884f4", "sighting_of_ref": "indicator--b67620ae-8590-4201-b8b1-fd1b8de4cb4e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e634b73-bd88-4586-a68e-3052d9b198f5", "sighting_of_ref": "indicator--26197131-cdeb-4409-8277-7eecd0ec6445", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1e5398-e6f6-4dc4-adf1-1a6f8c0a93d8", "sighting_of_ref": "indicator--420a0398-dacd-48cc-8911-38fe0f208077", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e766b1ac-6754-4032-842c-ca540f480f25", "sighting_of_ref": "indicator--144ff69b-5f2a-480f-9b53-017429f02be4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ecc912-0f28-4cb1-891e-1845cd449b1c", "sighting_of_ref": "indicator--1adc8508-0889-4e26-86f0-365115c48199", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35ca597-fb75-43cc-8d31-8b93ad37de64", "sighting_of_ref": "indicator--64bbea01-ed32-486a-8e51-e0c0a76fbeda", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f47bc85-0451-4304-aa59-20f605f07e44", "sighting_of_ref": "indicator--6286650a-b84a-4c11-92dd-e335cf017c60", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d46f132-0337-42b2-8d73-969e49b6c858", "sighting_of_ref": "indicator--a2d740ac-fed5-4ce0-8966-28c6ef7807b1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb69038d-0def-4b0c-a2d3-204c88462a5d", "sighting_of_ref": "indicator--e7f600c4-67a2-45f4-a8f5-16b2cfce7d14", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c551142-7f41-4d43-b9ad-30b494580987", "sighting_of_ref": "indicator--9e1fc8f4-7daf-4091-91f9-bf1d16b59465", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997e18d5-0f0d-41c9-b854-3cd02e1e5f0b", "sighting_of_ref": "indicator--82110017-f8d1-4e17-89de-811325207dbd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb94a40-9080-4acf-9089-29d58ced7cb0", "sighting_of_ref": "indicator--de8de283-ef66-406d-bacd-3f967f3b84fe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d03271-e29a-4e9d-80d4-648803ac6fe8", "sighting_of_ref": "indicator--5bdee662-d9da-4e1c-a888-bdcca027c4a0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14049de-7aa2-474b-93c0-179cb93e2fd0", "sighting_of_ref": "indicator--cb74c5b8-3a2e-4e4a-8274-977e98438d99", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a966ce6f-0ff5-434b-a9a5-345d6d90a719", "sighting_of_ref": "indicator--8d632199-11f9-49ed-9c6f-ebbb8ccb8f12", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f95b31c-6b95-4524-b795-aaaeeab7d05f", "sighting_of_ref": "indicator--e47f93ef-09a4-45a4-8fe7-a277da4b00cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36a1a94-7dd0-4ca0-8e50-e7625e6c7b3a", "sighting_of_ref": "indicator--ff08d791-2d63-44a8-97ff-58105a729681", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ecd8cf-40f8-40da-9057-74d46ef50181", "sighting_of_ref": "indicator--7ae438f6-411b-46d8-81d3-9b7af1c641a5", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24147eec-aef6-49b1-ad91-69247654f9aa", "sighting_of_ref": "indicator--3724c66e-9531-4703-9cb2-0b3531f21dc5", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fd6d6c-85ba-4a2d-9eb6-f005c064d7f6", "sighting_of_ref": "indicator--fc3fe9cc-3c4b-492f-9316-be8b13b0483a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae4b757-8b9d-41dd-8854-5d538069b73f", "sighting_of_ref": "indicator--7bb7498a-204e-4d84-947f-d3f762f25da4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebccdf0c-f95a-4f0f-beed-63b88d2685b3", "sighting_of_ref": "indicator--5e591370-97a9-4e01-863d-644638820013", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6af415-ef74-49ba-a78a-60ac8d4ff991", "sighting_of_ref": "indicator--47d0e585-8b79-4f9a-a6e8-36743f4fb2dc", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe32e3fc-5fc7-4975-bff3-1ea1b2e2feda", "sighting_of_ref": "indicator--f76c0324-ec83-4881-91b5-6f774c4dc2a9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a32a878-e551-404f-8380-0d4a93d70e5f", "sighting_of_ref": "indicator--1d9022ec-eabf-4adf-9c87-8f2224403d0f", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377ed863-5d77-412a-bb31-4df2debc28ac", "sighting_of_ref": "indicator--b877aec4-2197-4937-aec1-c655655a1bb6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2efa43-f807-4483-aa0b-600d58a34021", "sighting_of_ref": "indicator--05bf5b87-42fc-4dd4-ae89-ebb76ca00c0a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea438c1-a029-4ccb-9e1e-2595e55d00a6", "sighting_of_ref": "indicator--7aaaa3ac-7026-4535-a3f9-6766682c3bd9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a2558d-3a50-4196-88d0-53fcfc2ca92d", "sighting_of_ref": "indicator--8b035c89-24d6-42ff-b59d-7230671befee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fcd9fe-ff34-4735-8172-95c768ecdeee", "sighting_of_ref": "indicator--79d98645-c9bd-4d78-861c-798da11189fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c165871-7fbb-40ea-aff6-9a379ab6eb3d", "sighting_of_ref": "indicator--91699486-bd71-4511-a9d6-560966011cf7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c58c77-6898-44e5-b9bd-2750a61c5bbb", "sighting_of_ref": "indicator--6331f0de-ce0c-420c-aa1d-0510606a1b8e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900ffcfc-7017-4ef2-9dc0-1dbd88e49220", "sighting_of_ref": "indicator--5ea62564-e330-4165-aa96-ed46bc09a651", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb3d675-8fe0-4500-9ebc-61299bba48b8", "sighting_of_ref": "indicator--ae497651-0ca5-4fe8-bf53-c2b7b37c65ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ce7c05-63e3-46af-8f14-1bf33201d906", "sighting_of_ref": "indicator--9973bc68-cfde-4343-9c95-af36bf22150f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0e8628-9f6d-4f90-a138-91085d84d868", "sighting_of_ref": "indicator--6fb7a632-97a4-40c0-8e02-b5052f0a909e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8063c63a-a5c6-4d37-b733-3f2e240ba766", "sighting_of_ref": "indicator--e891b071-c25e-4efa-b9fa-9f9b61a0ed66", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98849698-1179-4c94-971b-14c5467c2448", "sighting_of_ref": "indicator--e7b36b7b-1836-4d8a-8ee8-99c883715cd4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c89e14e-15c8-4429-8c83-ac94ffdaeb8a", "sighting_of_ref": "indicator--20be5a2e-13a4-4291-b7da-6903e9977830", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4752b24-0fd4-4a32-8ff8-2bfb3ba2a82a", "sighting_of_ref": "indicator--0879b43e-9707-489c-a03f-05f6768a2cd9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e986831f-abab-4fe4-b9f0-a6bc11e2ff01", "sighting_of_ref": "indicator--26edc584-956c-4adb-88f7-ccf5ba307ed2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7960513a-87d3-44cd-a9f0-1c3cf61c141c", "sighting_of_ref": "indicator--f1913757-243b-46fc-8f87-73c73459b331", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4a300c-7208-4569-8085-40690f53eec9", "sighting_of_ref": "indicator--3161a544-3deb-456d-bb9a-2721e4eac6fc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce502ed-33a3-4256-a72b-2834c5fcd53c", "sighting_of_ref": "indicator--ae83f539-31f8-4152-8c1e-c6f6b9711303", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebb3e49-edfd-4709-8c4c-c24a2ec4d1f4", "sighting_of_ref": "indicator--efe412cd-7d80-4617-9055-e51c43d8125f", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21dac455-f4d4-40c9-b40c-534699c88384", "sighting_of_ref": "indicator--da47038b-43ad-49dc-a29a-9288814ccf7c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b700bf17-328b-4fb2-a618-2ef182187c00", "sighting_of_ref": "indicator--fc3a92b3-2f05-4c74-bbcc-65af87acfad8", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f35fded-8cce-439a-9a60-419a34429c0a", "sighting_of_ref": "indicator--8a9f25fa-44b6-40ff-b334-fece02ea8e09", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8b7535-d75a-4407-a4a4-1bad4314cc43", "sighting_of_ref": "indicator--d40c627d-93c3-46a8-8a90-9220d078832a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31143159-838f-4a97-8562-12ab3e6a2316", "sighting_of_ref": "indicator--6f592345-26c2-4d42-bbfa-bdaf4679dbd4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e270884-fa23-4d43-a771-8ccf088595cf", "sighting_of_ref": "indicator--5588803d-dd85-4214-9d1e-589186231658", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2cd86f-b1b4-406d-a974-78abf1cd13af", "sighting_of_ref": "indicator--8b399bf5-bb8a-4eae-95f8-486cdcabed3a", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c767ae-dbe7-43b4-95a3-0d40d7022a1d", "sighting_of_ref": "indicator--45c2dd50-5d33-44c2-8825-125d4dd42507", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38da176e-aee8-4ed1-af50-6b05abdfa024", "sighting_of_ref": "indicator--4175379b-1a0f-4b54-a922-a06f42c8cb03", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7fb0dd-44d4-4b30-901c-d780cd0446f3", "sighting_of_ref": "indicator--31e746e1-542f-45bf-b770-5b0e84ce80a6", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8820cc79-6249-4243-b1d5-819ffcdbdefc", "sighting_of_ref": "indicator--2dd08eaf-25a9-4a42-879a-8f0ef08018a8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc6cc20-0d11-466f-8634-8aed809c0c51", "sighting_of_ref": "indicator--74ce8f0f-afed-4914-af74-84316799da6e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45696a7-3b93-4852-9834-db8be006b3a6", "sighting_of_ref": "indicator--1be7e632-3a85-49cf-a10e-354fea26063e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077ba802-2576-4e90-b629-2a8a0b0a13f8", "sighting_of_ref": "indicator--320dc48a-9852-41dc-98e7-2347100e12ec", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4cc360-e8d7-483b-a16a-d4b410b78d8d", "sighting_of_ref": "indicator--069313ca-22b5-49ae-9b08-d3024af5f381", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80acd5c4-4c59-499e-ac34-76aab57e3992", "sighting_of_ref": "indicator--0f846262-e7f9-47ca-a30f-c1ef75c7f7fc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f9a4a0-1585-4d1b-92b5-bbc4b90a6c45", "sighting_of_ref": "indicator--8fc8b259-7c49-441c-871a-b60d327b8a8c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7896a1-060b-4922-a601-898c9e4206fa", "sighting_of_ref": "indicator--cbd0f891-d396-45e7-b0db-2b92d6de4a37", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f516c8b1-31ef-4b38-99a0-908350a43c3e", "sighting_of_ref": "indicator--ed5e7681-f014-482f-9108-1f9af5cab43d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878d8c14-fef7-4e8e-89b3-a3dadd689a9a", "sighting_of_ref": "indicator--6de43a6e-ceaa-44b7-a763-94ca1e679ba4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4309ecf4-13f3-4dc1-99fc-cb204be07d87", "sighting_of_ref": "indicator--54df5497-86ef-4bc3-8075-deb2521d89be", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121f4261-55fb-4b2a-82af-1491e757fd29", "sighting_of_ref": "indicator--991b613a-d6da-45a7-b455-e6483539c9a2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb61f1da-f80a-4aa8-a4b4-532e9f2db0f1", "sighting_of_ref": "indicator--55c16893-7d89-4385-9f70-0711f7be4386", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779df74a-b806-42a1-8ff4-46e2120d6e48", "sighting_of_ref": "indicator--a0d330ca-bc55-4037-aff2-f66fb5ecdef7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a1d1b1-29f8-410c-9006-01aaa52d4883", "sighting_of_ref": "indicator--58fd228f-6bb7-4477-8d9a-8b0bc22ad6f6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d981d9f0-9abe-44fa-a046-250edd7dffa2", "sighting_of_ref": "indicator--43252102-ccf1-4e07-9edd-b3be31d106a9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9691b096-e67a-4bc0-a2c7-3f267243ef5d", "sighting_of_ref": "indicator--c2a22117-e942-4d35-a980-78d71ebe2539", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2b1357-138e-4906-8b75-ec8d897d4181", "sighting_of_ref": "indicator--dbd2b98d-dbee-462b-9fb5-df60963b9895", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab91222-b092-4017-8556-df3add252797", "sighting_of_ref": "indicator--983cc818-4111-4dac-b6fc-f5111970bc34", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c704987-7976-4b9d-a4fa-f6fb4f4bf45e", "sighting_of_ref": "indicator--78d1cc09-98b6-4c13-909e-a0d2dd51f50f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d59d27-ec07-4346-af6b-8d6396506a45", "sighting_of_ref": "indicator--19160c8b-f2f9-47d7-8416-c0831c68868b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0dabc4-2c0d-4161-b7d6-18cc8f2abfe3", "sighting_of_ref": "indicator--66c8471c-bad3-4394-82b1-ff80747fb927", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757cbdb8-b136-4963-a03f-b0ccd79f3d93", "sighting_of_ref": "indicator--2da90921-e57b-4158-8745-3e1759c40c0e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766f67ad-7dc6-4982-b264-ffdce54846fd", "sighting_of_ref": "indicator--8a606654-ae91-40ee-be6e-6c76d586e4b7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfed5da8-b0a8-44d6-8956-53a43e6160b1", "sighting_of_ref": "indicator--85f67759-3a1a-4ecb-af75-c70bd7a8fb88", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b353c97-dba0-4eef-a165-58af88111d25", "sighting_of_ref": "indicator--b6b1a45c-a15f-4b8c-ad05-5a835b01ad38", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ddd6d9-c4e5-47c2-8db0-80c4933c7ea9", "sighting_of_ref": "indicator--1d9a3507-44cc-4341-8d1f-8d05f09e3e37", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a171bd4-69e3-4ffd-936d-fd59529fd045", "sighting_of_ref": "indicator--9265a39e-6b67-4bfb-a655-5306d9fdbf9c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8132c78e-fe93-4553-be9d-f2ec187cc361", "sighting_of_ref": "indicator--dff4de22-1f34-48c0-961c-32abe40b81f9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cdf3c3-f0c4-4228-9106-9b565b827b4b", "sighting_of_ref": "indicator--6fc95afb-b080-429f-aebc-c6265af3fde6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf20c6b-379c-4118-a48d-2f82f4a0adf9", "sighting_of_ref": "indicator--ffc85620-8670-4ee7-aadd-a4eaebbf6e12", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c73116d-55fd-4169-9534-5ea6ba116ac4", "sighting_of_ref": "indicator--8a05e8c7-8fb4-43b9-a8cc-83daa6462a39", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7137374b-7be2-442a-bb55-62f64c01878d", "sighting_of_ref": "indicator--32adb6bc-f5c0-4220-83e7-ccfb440d40fa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eaaf410-88dc-4193-9d81-23dd3ea04cff", "sighting_of_ref": "indicator--f603ba4a-9469-49e4-aca4-c29e1fd9fecf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6632dfa-2320-48a6-9555-6dd972793974", "sighting_of_ref": "indicator--77ae812b-a57f-438c-8626-0119111e053e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d7cb9c-57b3-46e3-8b0d-56c6e4819df2", "sighting_of_ref": "indicator--1aded383-47a9-4b6e-be2e-5c62dc188972", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b28cc6c-f3ad-41fd-997c-372e449e8669", "sighting_of_ref": "indicator--43ee92a6-0b05-46b7-bea2-37f91a82f742", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9dfaa0f-2800-4bd3-ac08-53858c4d1cef", "sighting_of_ref": "indicator--43ee92a6-0b05-46b7-bea2-37f91a82f742", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1149a0-e27f-46fc-bf85-d83521877f83", "sighting_of_ref": "indicator--71adba32-350e-4413-a210-c6e421875bdc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da636d28-7bcd-429e-9de8-fab9e7a7ad2e", "sighting_of_ref": "indicator--73c16d45-c322-41cf-bd7d-3ca8658928a9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6448af99-0786-4b57-98c3-cf3335608b78", "sighting_of_ref": "indicator--a09af3de-b631-43e3-b3f4-3d15f6606096", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9501bdba-91a1-491d-acbd-4b4b732efc4e", "sighting_of_ref": "indicator--81609036-5ea4-4508-b2a6-ab3b755effbd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb11877-1727-4fd8-bc97-71088f205af7", "sighting_of_ref": "indicator--bf2910a5-7afe-4fe7-b114-110ee7f6a301", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e1a5b2-db9a-40d4-ab4e-ee8283822909", "sighting_of_ref": "indicator--0af12ac7-f729-4dec-b423-c0540f7f9654", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5adcbcbb-ce6f-49c2-97e5-6bf135f0dfb0", "sighting_of_ref": "indicator--459c0630-016c-46ab-aea2-e43fd6f54649", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bc6e8f-8d2b-430a-8c51-1c0c0401428e", "sighting_of_ref": "indicator--26449ccc-8dfd-4710-a082-142d26cc22e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872fad76-f544-4077-8792-fe343959b3b7", "sighting_of_ref": "indicator--40503b4f-18e0-4026-bf7d-aa0619495f5c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f911cc3-72d3-4fb4-b245-e1089167db25", "sighting_of_ref": "indicator--40503b4f-18e0-4026-bf7d-aa0619495f5c", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a90bad-8d42-43ca-9ca9-b89fa331f79e", "sighting_of_ref": "indicator--40503b4f-18e0-4026-bf7d-aa0619495f5c", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b64b79c-1168-458c-9ecb-9c14cd12304b", "sighting_of_ref": "indicator--05b1ff6f-82ae-4da7-a1e2-80bce03d64e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bb0235-e03c-40d0-b9ed-7eadbaf8c1c5", "sighting_of_ref": "indicator--36292c50-e4dd-4180-bbfa-b7649b9e2ea4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbe0d6e-b6e5-4399-b7dd-e81744a9f360", "sighting_of_ref": "indicator--2faa3dd4-ed1e-4987-8ae8-012c24de9f0f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dea2157-da8a-4cf7-9f22-5cc1a5075fe4", "sighting_of_ref": "indicator--c412ecbb-0717-4531-8346-81d1721a52a5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4fbdf9-44dd-43d7-894f-6024445ae8ac", "sighting_of_ref": "indicator--9d64a4bc-b64f-40da-a19c-356a711eafad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d9c25e-e168-414a-8f62-1d0e4ba5fc4f", "sighting_of_ref": "indicator--04546c90-7191-414f-a670-663e097c9d31", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5f24e6-431b-4bf8-8dbd-5fd80adc1496", "sighting_of_ref": "indicator--598ebae6-cbe7-432a-bd42-b60c30962937", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298d0314-2414-41a5-a0e2-798af8f32732", "sighting_of_ref": "indicator--4b034b59-64ad-4057-a78b-383c387fd339", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df85d2c5-5957-4759-962a-7b0e4f336abd", "sighting_of_ref": "indicator--e23a32ad-b20d-420f-8852-9553dde7b671", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f2ec0a-de62-42ad-8c04-0e3194c2564f", "sighting_of_ref": "indicator--b46354ee-d138-47a3-87e4-9fa10615fb61", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e88830b-67dc-4d84-bfb8-a49db51db5b2", "sighting_of_ref": "indicator--695c30c3-35c5-4617-95f7-7564ef9f1521", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3f4a32-0e20-40f3-9fa3-7be11f725eff", "sighting_of_ref": "indicator--14bd29dc-2d6b-48e6-ba81-86aac8bbeb93", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600fd549-315a-409c-adaa-b0f3da8e30c5", "sighting_of_ref": "indicator--9229e43f-0bcd-4938-95ff-04cb3d007765", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ec4f1b-8add-4990-89df-5ed842d2676e", "sighting_of_ref": "indicator--a8668c01-b7fc-4fee-b120-a34c39d1e111", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8225e541-6f9c-4728-adf6-289d0e6b718b", "sighting_of_ref": "indicator--8d3af246-0685-4a22-b269-02d104d32d37", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e899335-266a-4242-a22d-4a74e11bcf8d", "sighting_of_ref": "indicator--4145bea1-0b8e-49de-975d-a94131a6fdcf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f594c7-820a-41be-a774-d155612c24cc", "sighting_of_ref": "indicator--53183c74-1d03-4907-9d96-4335c13a707a", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0125a2-1b84-4815-8ea2-52b4118fb920", "sighting_of_ref": "indicator--69be109d-a45d-4f0a-a0cc-fe6ed9ace91f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566ec9a3-0394-4700-9998-ca067f83c328", "sighting_of_ref": "indicator--e162460f-c901-4cc0-9223-6f7d14610a9d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08ce266-6af5-4f7b-8ec8-8ecc72d0145a", "sighting_of_ref": "indicator--1842717c-2458-49a5-974f-1cfa3977cb34", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e980b53e-0bb1-42cf-83ff-5ec37e7e6a33", "sighting_of_ref": "indicator--b1fec7dc-48ba-432b-9c34-62dc737726f5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af2a90a-8d4b-4064-89d9-506613eec706", "sighting_of_ref": "indicator--094da683-3970-456c-b0c0-994dd28fdc24", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daafdc21-c5d4-44ae-af58-0d25e7ac0dce", "sighting_of_ref": "indicator--a4301673-fc1a-4de2-adc0-4717e9b00b40", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae90193-efba-44f6-a0ab-dd00ad7200f1", "sighting_of_ref": "indicator--9dd32f61-07dd-4b14-a375-b0ed3fd25f04", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426361b2-1c49-47ca-a357-900b8d4ca73e", "sighting_of_ref": "indicator--de8d39ff-1a8e-4d62-b896-949c25dabc20", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf299cc-144e-49ac-b39c-4a3fe40de21e", "sighting_of_ref": "indicator--4921e2dc-ba4f-483e-ac2d-5c56194b7fea", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f3a92b-8d31-439e-8968-1105845274c2", "sighting_of_ref": "indicator--c358e1a9-d7d0-46d7-9ded-2340f6c598db", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf948474-8eea-4b9f-8c37-d4d65da61c8d", "sighting_of_ref": "indicator--f03a0989-ccbc-4465-babc-6e190854693a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9c15ba-26fd-4914-86a8-e0fbda257831", "sighting_of_ref": "indicator--af22767d-f469-4d34-a665-64352147ccfb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b92341-3351-4046-a1eb-eb9f053c909f", "sighting_of_ref": "indicator--d4cc76ae-3672-407f-b0bb-73d82c44252b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f1cc4b-4252-482c-868d-b52f9b2a540d", "sighting_of_ref": "indicator--c170b7d3-facd-4f6c-8512-0fb170b2eeaa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5ad958-7f9e-4625-8fff-e452afcd8b7c", "sighting_of_ref": "indicator--e8503268-b40a-4d7b-b20a-0a016fdff49b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a6d96e-304e-4809-b0c0-f5aac406eef7", "sighting_of_ref": "indicator--31babf95-1475-4699-bbcb-83fc0a4a29a1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559d1a40-e645-45dc-aea5-89ca5b965f89", "sighting_of_ref": "indicator--ebabf63b-c489-48ad-9216-c7c54a318f4e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc06289-4f1a-49f5-8bd8-6a266b20a5f7", "sighting_of_ref": "indicator--80bf6064-ee3b-4e12-b546-5df350ba7e61", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e778435-8e92-4bda-ab80-463449e1c186", "sighting_of_ref": "indicator--728e3a91-fe2a-4c00-b3bf-e3640fd5dd9c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d7289b-7ad0-49ab-8017-aad1779afbba", "sighting_of_ref": "indicator--bf1fba2f-e746-4145-a14a-18616aa16000", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5feee527-bf80-4416-b1ae-2f78ce3afceb", "sighting_of_ref": "indicator--89b59a6b-0612-4057-ad9a-3da816af90aa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e96194-1885-4f6a-a034-87597b235e61", "sighting_of_ref": "indicator--b9cc18b2-d29d-4361-8459-94b98b0c0221", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ec3bea-9171-4edd-948f-614478a91fc9", "sighting_of_ref": "indicator--2ff489c3-d162-4efa-96d1-fdf453b2f5df", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55ac66a-1c7a-4856-be24-dbfa6e610a64", "sighting_of_ref": "indicator--06766cd0-c2b1-4484-a1c0-255c7b6f4b92", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943552db-37b6-4c69-a279-ae534c540ec6", "sighting_of_ref": "indicator--1f7f830e-7add-45d9-bbd9-1d403be71def", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3492d0cc-8a66-49f7-a78a-dbb29f67d04a", "sighting_of_ref": "indicator--6a25b07b-3530-40fc-b92e-6ec8c2709236", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c53999c-319b-4ac7-813f-1bdbe1e51a99", "sighting_of_ref": "indicator--6a25b07b-3530-40fc-b92e-6ec8c2709236", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9dff66-23ac-4535-a189-822ddb846080", "sighting_of_ref": "indicator--fd2a05c1-340a-49a9-9080-33afe1ac0a0e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a41990-ed6f-4f31-9fee-3562a4357b49", "sighting_of_ref": "indicator--6a532706-afd7-4912-b23c-eeb9bee9affd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47fadf63-fbb1-42c1-8619-3b0aef99a961", "sighting_of_ref": "indicator--38661d39-be2e-4bfe-9c80-f1a6fd6658bf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927f31f5-a817-4c60-b77e-c035b42b6516", "sighting_of_ref": "indicator--700cc82b-6e5f-4fea-a7eb-922161472aed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9261be-3d44-4d9a-937f-d1d8ffd7ea0f", "sighting_of_ref": "indicator--84530693-2d3d-46c2-a2ee-c6307473cbe4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ebc06c-c12d-465e-9845-a1d6a4ac8999", "sighting_of_ref": "indicator--f5cfae83-e9be-49a7-93db-c7a457943355", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6294071-b98a-4327-a744-f485b75e4e52", "sighting_of_ref": "indicator--ca304a58-9f32-41e2-81c7-c6529addeb7b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fb16b1-492f-4fa1-900a-d15eaa191ae7", "sighting_of_ref": "indicator--170a0e61-71b2-43ac-80b0-a830407c671d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb3af34-ee5a-4142-bd79-b4e40663daa1", "sighting_of_ref": "indicator--b6c50a04-067c-429b-b706-55c5208a66ba", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2af81a-f8df-4623-8122-26aa7a33761f", "sighting_of_ref": "indicator--110cfd08-2c62-4164-af19-d134ef04876f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79db5d8f-ee51-4ccc-aa82-11cbfa6fdefd", "sighting_of_ref": "indicator--364e500f-f047-43ce-80ed-cc65fb4a8064", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4e03dc-64f9-4f45-9f48-db3d66f89ae2", "sighting_of_ref": "indicator--d69ca014-18cc-46e5-986a-7188d69aed18", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb72942-afe6-4b78-959d-76069657c858", "sighting_of_ref": "indicator--33743066-14b0-4652-bfb3-70f7a2da0393", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50c9128-1fc6-4395-af29-319ce2395033", "sighting_of_ref": "indicator--c86a3625-2c71-4164-a902-fb75896c51d9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43cb99ef-fbc7-4869-b48e-4c81f6b98fca", "sighting_of_ref": "indicator--0d2ce92d-d30a-4bba-845a-0fc5d839e9b4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf39c97-605e-4c89-964a-b2e9cafe9fa6", "sighting_of_ref": "indicator--5edf3d4a-be89-4424-8d69-061333019f91", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a240b2-57c8-483a-9583-fa32bc7ca725", "sighting_of_ref": "indicator--6467fd01-b694-4cef-9c39-3feb91bccc88", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387c7a57-ec60-4c7f-931f-742177dc44aa", "sighting_of_ref": "indicator--12817fcf-698b-4f5d-baf4-4f644b9a7b20", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73226893-8325-499d-ad8d-c3f55bb90940", "sighting_of_ref": "indicator--20c614f5-914e-4821-9c2b-8683b2b10772", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e706aff6-166a-425a-b673-35195e2d7bc6", "sighting_of_ref": "indicator--65eb83a4-cfd1-4b35-8368-02d27a0c3fce", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7f13e3-3fb2-465e-bb47-18c7e438a8a0", "sighting_of_ref": "indicator--40d677c7-d909-4ae7-9055-980925c73e92", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5806a52-7307-4076-8f3e-197c1ea61c8a", "sighting_of_ref": "indicator--1925f99c-dc9c-447e-a0d3-8f3c38112291", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c962747-6120-4010-9ac0-21d147659907", "sighting_of_ref": "indicator--ec9b9d5a-26de-4536-9b42-c3c6d171db62", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2ea528-6e8c-4966-a5bd-4b9cd576ae38", "sighting_of_ref": "indicator--4d85136d-732c-4a52-9880-be1622709474", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3315fd11-2395-4c4e-95dc-223cb6a4df3a", "sighting_of_ref": "indicator--6ca0338d-09b6-41bf-844a-de3101cf2161", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d71c856-7246-45ec-86c2-8e9b2d415ef7", "sighting_of_ref": "indicator--16848e0b-b393-4203-a12b-2735d09d374d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f267a73-9e53-4f2a-b195-15f2e4b68806", "sighting_of_ref": "indicator--480337a8-1a0b-40b0-967d-5ecb13e50dd9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d067be-34f8-43f3-8ea0-c9e45e2866f8", "sighting_of_ref": "indicator--a643da46-a94a-428f-a2c5-08a7715d9076", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87883944-5977-446f-bfc5-c019a29c7e0d", "sighting_of_ref": "indicator--8aa5b479-9df7-43d0-a2c8-6e9862eeebef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1d406f-1cb2-4163-9dba-5d3e9f91b43e", "sighting_of_ref": "indicator--589a7da4-e503-4920-b5c7-7cada6496707", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebed131-68ff-419c-90e4-d573b7a30cc4", "sighting_of_ref": "indicator--e1a17711-ac1e-4ab6-bffa-2cb58b5f38af", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5eb4217-7ef0-4841-be08-201c81bbce5d", "sighting_of_ref": "indicator--46846f46-df46-4428-8ba6-f23c1bf6a0be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1b41ff-0cb5-4f7e-ba4d-dd322a38f811", "sighting_of_ref": "indicator--46846f46-df46-4428-8ba6-f23c1bf6a0be", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65022a63-feb0-4612-8d58-b4e9063a7111", "sighting_of_ref": "indicator--759d8b82-f3ec-421a-871e-3eb76fb64239", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989521f3-a94c-476f-9413-b1a1c13d1ba4", "sighting_of_ref": "indicator--5c4d50af-8462-4b38-8bba-bbf4eb5274d0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6a1397-1415-45d2-94ad-c2507a2cdba2", "sighting_of_ref": "indicator--a6b0de8d-8e22-4e0a-ad15-5a978d9f3b02", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff705d5-bd59-4c53-a51f-a985f791b742", "sighting_of_ref": "indicator--3998eded-d7f3-4bea-b20a-56796a669d68", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894ef526-1924-4c3a-b006-f952fda15bee", "sighting_of_ref": "indicator--efa0a47d-6f3c-48eb-a63b-b5f3362a2f62", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a0d78c-0c1e-4cd6-ae70-5e6b3890f823", "sighting_of_ref": "indicator--597a4ec6-761c-4e04-8fe0-8fdcfb8fbef0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93175b2-658d-40f9-9b44-9b6ae764216c", "sighting_of_ref": "indicator--6cac0c8b-07f9-40d2-b68a-318499fc2f64", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17512152-9bdf-428d-b4c2-d6594c5e25eb", "sighting_of_ref": "indicator--5a417f08-c1fd-42e7-82e9-64b1a66b5ec0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbd0259-0073-4d65-91ff-94d6429aca55", "sighting_of_ref": "indicator--2d720b51-4c16-4d70-9dea-27307cc5d919", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4527d503-6a2e-41cf-b2fe-8e9585260855", "sighting_of_ref": "indicator--2a421818-3256-42d6-9ab3-e36e4a163095", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5c66e0-de69-43de-ad2d-7a77248db685", "sighting_of_ref": "indicator--19cee452-711d-4707-8aba-743dbcffbc2a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afd60df-ef73-45a9-9eb5-4cd002628b9c", "sighting_of_ref": "indicator--c863a81a-07c9-4cf2-9e96-2d0fbb19a230", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74c9c49-6221-4d32-9e6c-92c04b84b87a", "sighting_of_ref": "indicator--8aa26b09-c3d2-4f83-9643-48b5ea5ee189", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c427649-77b5-4994-9e1c-17ec72b3168b", "sighting_of_ref": "indicator--5c294da8-17dc-4be1-a1cc-39f0f89ada66", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f4b49a-1b30-4cc2-9975-ec7edb427121", "sighting_of_ref": "indicator--5a450f9a-da45-40f9-9633-5656206cbd91", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72783af-4ef2-4f2b-a117-8c69291f1ade", "sighting_of_ref": "indicator--9059e2e2-4989-422a-8a73-4f6ea26a0be3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31bab7a-719b-4d9f-96dc-40ba73c15ab0", "sighting_of_ref": "indicator--d1f27987-97eb-4a6f-8f33-c6f9e6ef104a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17626eb9-0cfd-4b0f-9f90-8ec1d50af5b8", "sighting_of_ref": "indicator--7dc75961-5e89-4556-bdb7-416ffed1b4ac", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e81fee-5875-4a83-8088-b8ac0e74c962", "sighting_of_ref": "indicator--553cbaa8-40c7-42a6-bca0-ceb58c6dcea1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d690d5-eebd-40c8-adee-2d2561127fc9", "sighting_of_ref": "indicator--553cbaa8-40c7-42a6-bca0-ceb58c6dcea1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea94dce-3d8b-4036-85fd-e4c7b55e42ae", "sighting_of_ref": "indicator--baba7904-7e1e-4872-a61b-7d63d0cb624d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a16901-3a41-4b25-ae20-08490c17cbb5", "sighting_of_ref": "indicator--baba7904-7e1e-4872-a61b-7d63d0cb624d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d498e024-6c60-4ebd-80f3-29ecef215e4b", "sighting_of_ref": "indicator--7d474e4d-d2a5-4ef4-af07-a40cc72d2391", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4302341b-d394-4369-bafb-623e03db8f1a", "sighting_of_ref": "indicator--34ff996c-af17-4a6a-b369-31528a1ff51a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc45ba30-8acb-4482-8893-378ecb95a8b7", "sighting_of_ref": "indicator--ed43ceb8-07b9-43be-afdc-4e99890654f2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224ce44a-f30a-406c-910c-6a32838347eb", "sighting_of_ref": "indicator--a1e28f51-578d-4b72-8d99-6519bf79c0b5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6185134c-592b-442f-93f0-8377b5f669be", "sighting_of_ref": "indicator--d0aa920a-d14e-453d-9a1b-4e5f40a67fd5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d5e63d-8106-4913-b031-6b6d16efa216", "sighting_of_ref": "indicator--df5f0108-d211-4597-ac72-01f149d63c29", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396f860b-613f-440d-bbc1-aaced5e6483d", "sighting_of_ref": "indicator--9efd4645-821f-41d0-a4f3-6550124d1bb4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb27054-063f-40a8-b181-e12813bdcafb", "sighting_of_ref": "indicator--f4a33a13-f980-411e-abee-bb83f390cb63", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2fb073-d405-40ba-9481-cbf94ab692b0", "sighting_of_ref": "indicator--451f2e7d-bde0-4f65-8a7b-9a53eb0e625a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a57ab62-aad6-4fb4-a969-ae37fce3c5ea", "sighting_of_ref": "indicator--8fe17649-2712-4bd3-98ed-eba05e876b22", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1a263d-ddfa-4d13-b639-e9587a759d59", "sighting_of_ref": "indicator--e59a752b-617a-4b68-8609-be1fdc4f8836", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd88cfbd-66f4-47ec-8c44-5381c3b5e92f", "sighting_of_ref": "indicator--75ec4a00-fc4f-40c5-bb34-ac874bc7681d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d577afa-9572-45fb-90aa-03e7d6178a65", "sighting_of_ref": "indicator--756ff64f-e741-46c5-9c26-a9dbbd6292e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110628e7-576e-4158-a031-bfecd0678673", "sighting_of_ref": "indicator--343aa50b-a1cc-4861-90d7-4fc10e8248ee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b3fd53-94df-40fd-b062-99fd1967290c", "sighting_of_ref": "indicator--df848a0b-2672-45b5-9a22-1f03f25bfa3c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd9818c4-1f70-4fa1-b8e3-de7837487b9d", "sighting_of_ref": "indicator--e4f42076-293d-49cf-81ee-3d7d10bab62c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c940df8-a4d9-46f7-b321-9c105f1bd490", "sighting_of_ref": "indicator--539c8702-8b1e-4a14-8891-c7f8c05adfe9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27b935d-201b-4c48-ab73-95951d7f7591", "sighting_of_ref": "indicator--41930d96-906f-41b9-ac55-a74e39ec19cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556362dc-6bec-489f-8721-5b7d7059d85e", "sighting_of_ref": "indicator--41930d96-906f-41b9-ac55-a74e39ec19cf", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e8bfd1-3cd7-4f1b-8e3c-186a49ddbf3e", "sighting_of_ref": "indicator--cb4cb7dc-e810-45b7-8d5b-b704c0418887", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8298f859-d95a-454e-b541-d263300ce7a1", "sighting_of_ref": "indicator--fed18c23-56d4-459c-8c97-ff4d1b2db262", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6dd5fd7-b1e7-465d-b83e-7bcd60387ca9", "sighting_of_ref": "indicator--fea12fb3-ca32-41bc-92d1-ab252d118283", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cbdee7-4f30-4074-8c23-1d97886383b1", "sighting_of_ref": "indicator--67a70102-5cfb-4014-9731-9afe3c299f27", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc6aa53-4213-4f15-9759-031b8e074b35", "sighting_of_ref": "indicator--a03f7fe6-fa33-4399-b07c-be9658d58105", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f5d01b-c634-454c-94f1-572c8d5079b4", "sighting_of_ref": "indicator--838325ba-2458-400d-9198-a34fefb993c1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132f773e-5e50-4b7f-a7d8-2e221de8f962", "sighting_of_ref": "indicator--0631db8a-52d6-43f4-b3f3-27412c9f7f53", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db3e67a-34e6-4952-8d62-1e506169802f", "sighting_of_ref": "indicator--3d50ce86-3086-4c98-8064-76f0a85452e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4713594c-0705-4ba5-8c27-36329812db6b", "sighting_of_ref": "indicator--42b2ce48-b88f-49f3-93d1-e7905ab9a563", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bc1292-40b7-43b7-ba55-32d0072f57c7", "sighting_of_ref": "indicator--bd85763f-1ebd-4745-8cc5-50a4335d069c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce742467-e2d5-4aea-98c7-590b9502c015", "sighting_of_ref": "indicator--be2024d9-fb96-47c5-bcb3-f6864a120a86", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904e9012-91a4-4eaf-b152-fa95b415dde9", "sighting_of_ref": "indicator--6dbf6d39-39f9-4df9-89bd-eeb19505d08a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5a57d0-9235-4d1c-afb7-8e0b1c59276e", "sighting_of_ref": "indicator--a51ce5d3-3d15-484e-938d-b3a5d7c28120", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ad916c-81c4-416f-acfa-0dcc3b13a906", "sighting_of_ref": "indicator--cd3533d2-a089-48f9-8a36-2cb47c874093", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90c52ff-bc50-4c95-ac89-873f95f8927d", "sighting_of_ref": "indicator--3891bd47-a31f-4683-8fd1-bdb3f718766e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff25d2e4-2656-41a8-a273-2f662f2b1cc0", "sighting_of_ref": "indicator--df92b123-868e-470f-8255-a223cfe4f05c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7602c438-1bc5-4206-87d3-e35e0ad03f82", "sighting_of_ref": "indicator--ca169b47-68e3-408c-ac32-a24e3dd79e61", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462b3a9d-20d5-48d3-a2f3-1f143c3be21f", "sighting_of_ref": "indicator--197c5b7e-db45-4e0e-abe7-9e43dfbbb0bb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be0408b-3f51-4697-a5f3-259b923094b5", "sighting_of_ref": "indicator--807505df-c674-4612-9e43-9f071efdc5af", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cba8da-3fef-42e1-9251-86fc59e895ef", "sighting_of_ref": "indicator--e65674a9-2d24-4c73-b41d-fef66f5ad33d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef574d18-a218-45c9-9252-942455b05950", "sighting_of_ref": "indicator--5f01bd1e-cdf3-404a-b72d-b260e0800b2d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e3b7cb-e59c-4859-ae36-9006f43dca1b", "sighting_of_ref": "indicator--a7f9312f-71c8-46dc-be3a-56be9c4a85f8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d5c71f-29c0-49d0-80cb-2bd18f5117f4", "sighting_of_ref": "indicator--29236d44-35b1-4c30-9d7b-6de67f1fb038", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09001d3-1d2d-4cb6-bea0-15dfda6ff8be", "sighting_of_ref": "indicator--a30de750-a888-45cb-b157-09b80cff121d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927f054f-ed04-4008-8a40-3f0f07379458", "sighting_of_ref": "indicator--d6b20edb-c38e-456f-8480-9988980ba846", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765be219-945c-4ea2-bb6f-f4d38a2d86a8", "sighting_of_ref": "indicator--3132bfc6-eb4a-435a-8630-2367331518e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efedbca-7f0a-4822-ba0a-bde4bb5de7ad", "sighting_of_ref": "indicator--1842160a-8ebd-4b2f-91e1-8bdba9460388", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e572db0-ab62-442d-b7fd-02cb9b6c5ce1", "sighting_of_ref": "indicator--3f04d2e5-1bcb-40d9-834c-afffbf8d8d20", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27a2115-0c0b-4d6a-a6a6-4f2f2e1e923e", "sighting_of_ref": "indicator--3bc50cc9-a660-4158-8fb2-56c9fb3f8649", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f02e76-ee15-4289-87fc-427ca81197c7", "sighting_of_ref": "indicator--616edc5a-49a2-4031-902a-2703602151d0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b2b4a3-6b08-42f8-88a4-a5ee467dac20", "sighting_of_ref": "indicator--d1c62f83-3535-4ade-b891-c877affea8e2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa887cf-6b80-47c8-bb50-4a2e98c6c00d", "sighting_of_ref": "indicator--0cf1469a-a37a-4995-ab43-19646f7cb8f1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54026a5-38a8-4799-b103-ca100b478f3d", "sighting_of_ref": "indicator--55cc389f-3a0e-491d-886e-529832a8ac32", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39308b6f-9671-4a51-a719-ca011dff2ac6", "sighting_of_ref": "indicator--24b4abda-80b5-4782-ab50-d2d91a016561", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ea10f4-21cf-4f59-a06b-3c52f1f7e05b", "sighting_of_ref": "indicator--54182180-50aa-4418-86ce-b75f67a75d93", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ed8150-a998-4695-81af-ae54c5f8fe44", "sighting_of_ref": "indicator--9e0d713d-2acc-4aab-bc20-6c3f95c6d005", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548ad17a-b439-4623-9541-b920ed4e97e9", "sighting_of_ref": "indicator--22078ed2-2ed7-414d-a01e-35eb1ee58285", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b7ceb9-98a7-4e90-8b23-23f639d508b4", "sighting_of_ref": "indicator--1ed37aa0-b354-41b8-ac6e-db1a7c8d76f3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93265d5-b5fc-4899-a2bb-f61c289367ff", "sighting_of_ref": "indicator--4197ee09-7c76-42d7-ba96-ca7e584f6b14", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447fbc00-5029-4c0d-a2f4-2de0e8a58a9b", "sighting_of_ref": "indicator--3a742593-2650-4e28-afbe-c37cf8344408", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2704044-ee3f-4dd0-953b-9a3cd1f2a02e", "sighting_of_ref": "indicator--d09c1bc2-47e4-4542-8798-4d8f5cca4449", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1893b9a-5dcd-4bcc-ade8-02b4a30d6980", "sighting_of_ref": "indicator--1423e5d4-0514-4120-8eba-05aa900773e7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4df87d0-e091-4d83-b74a-e432b4e3b8ca", "sighting_of_ref": "indicator--34f33705-ec39-4101-b743-cdc667b1e10b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df35461-356f-402e-ae5b-db843afe15af", "sighting_of_ref": "indicator--8633de4d-31ab-49dc-a6e0-9b5bd24f6ee0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7e2993-a0a6-4f9b-8b8c-f75f9f2c6da8", "sighting_of_ref": "indicator--6d67112a-db67-443e-b83e-671d11efd12d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093ac316-409f-4000-8878-77c269743992", "sighting_of_ref": "indicator--f05e97da-39e8-4611-8742-6962bd43405a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151f9665-bb1e-44c0-a368-5ebd663fad95", "sighting_of_ref": "indicator--a77e462e-e34b-4342-b3ba-eae81f25ce05", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18084e09-fce7-437d-845b-eaaa162cd797", "sighting_of_ref": "indicator--15a35f61-69cd-435e-a3b2-24156dc4867c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7974da29-b011-4bae-b1d8-b073d62f33e2", "sighting_of_ref": "indicator--55948783-30b2-48b5-9060-3886936b071e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0196230e-9bf2-41fc-a6f2-ba28308f7866", "sighting_of_ref": "indicator--716530db-4f7e-45e6-99f7-b2c92af39a0c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b490d7-ff3f-4e6f-b57e-405ba6d979b3", "sighting_of_ref": "indicator--ef4749ed-494f-4e53-abcf-6e1ec8c541f6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9b7677-3859-4db2-b5ea-e76a8207b48c", "sighting_of_ref": "indicator--db7ba768-b6e5-426f-b390-495202b158fa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f439fb-5b01-4515-8336-67ebade57906", "sighting_of_ref": "indicator--5a3ab684-2d7c-4b4e-aad9-5b9092dc929d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf88a5f-33ce-463a-814f-f9f9d48648cd", "sighting_of_ref": "indicator--1739d326-1ad5-4561-8687-74c24b5c34ee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f20fde-9447-489a-afcf-7f67ed80de7f", "sighting_of_ref": "indicator--f14cb3ae-b40e-44ba-be9a-7a1ee47561b7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae56dd6-77e3-429a-a190-266e61b55250", "sighting_of_ref": "indicator--03c39cfe-18bf-4c13-8b5c-b5e0cbecd9b5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a2f5aa-d93d-4b74-a5e3-b10cffb15d54", "sighting_of_ref": "indicator--fe0607d3-b6dd-403d-8f34-e8c5464ff82b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5894d79b-80e7-43bb-874b-7750d1ab3470", "sighting_of_ref": "indicator--f0cf436b-c7d8-49db-9c2b-b3c6b9e58237", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111f9c1e-cc16-4102-ac96-746ba989330f", "sighting_of_ref": "indicator--ae3060a6-57dd-46ea-8571-05f66f681a81", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95994f9b-882f-45a5-8f73-42472bd503f6", "sighting_of_ref": "indicator--a176101f-c23b-40d6-9c07-26b942a8ccdf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ec1eed-235f-4ba2-85db-09a0d019c406", "sighting_of_ref": "indicator--478b679f-d4a4-4199-9ef9-1a675d1e31fc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceaed47c-c8b9-460f-ab93-9d917e2d9677", "sighting_of_ref": "indicator--47d2d854-bb78-454a-8a98-4c05a0db6b29", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239266a1-d5f7-4763-99e8-8ebab807c149", "sighting_of_ref": "indicator--f1825c3a-0b93-4b26-9fb3-d3ed85e7793c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7654b7-98b0-41b9-896f-f449bb8c179b", "sighting_of_ref": "indicator--5a5b7f95-09cc-4d2c-8e67-4506714d8784", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b2bba6-52ee-47cc-9408-5d9b84e14136", "sighting_of_ref": "indicator--9e750816-6c99-4532-804c-67c2f19c5cce", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ac0434-8342-480d-b03a-586686abd106", "sighting_of_ref": "indicator--65aecaf4-5fde-4596-bd19-fa1c21e514fb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8866d440-244e-4a78-b1a4-c98810ec8f53", "sighting_of_ref": "indicator--779ebc06-5c00-4486-89f5-968ffa7b3988", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2f07aa-8096-4e19-bcb1-f9a3bd949fa4", "sighting_of_ref": "indicator--d9fa4916-4e20-4dd5-a471-dd9584405d57", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb95b3df-ff2d-455d-a731-8c200328b547", "sighting_of_ref": "indicator--38df059e-6b90-49b3-8a01-2a8a419cadd7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1adb84-d292-4265-9f27-902c9d2926a3", "sighting_of_ref": "indicator--6a4b2f96-0039-4376-9457-07567da51123", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e31b7a6-4aee-4cac-a826-c4c13d9230f1", "sighting_of_ref": "indicator--8d1c2182-7dce-4492-aae8-e79d3be326c0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beab337e-08f5-46e8-a35b-374174089188", "sighting_of_ref": "indicator--5c93c6c8-b324-430a-b137-c5a7f3b0b6a9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43086943-cd2b-4af4-8e72-c3f7b84dba56", "sighting_of_ref": "indicator--cd1b1e4f-0fb0-4962-9742-1eae823ecbf7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db709d83-ab9c-4661-8d5f-ed66b412a07a", "sighting_of_ref": "indicator--2a1a82da-2667-4418-b338-6b8549f99ce7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb438d6-6cc2-4bef-a296-1894dec9ba58", "sighting_of_ref": "indicator--524beae3-43b1-4f78-bb44-f91dbadfe309", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a0cc3b-af75-4e00-9216-799bf1afbae2", "sighting_of_ref": "indicator--2c62dbab-ca24-4f90-bd19-7dc2a55dd0e3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b0b1e8-590d-4359-b7cd-01fefcfed28d", "sighting_of_ref": "indicator--c323bb6f-bbab-4406-8856-fd9cc49b68f8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174b315e-be1b-42c8-8380-c9a71ac331cf", "sighting_of_ref": "indicator--39ebd4d6-680c-4a47-a1b3-43d6da31f9a5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03fede90-32e1-4645-b312-98618f833a4b", "sighting_of_ref": "indicator--2ec134c1-5eda-4adf-93a5-ea22ce291a1e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05da49f1-83ac-4428-bed2-f79a235ff93c", "sighting_of_ref": "indicator--fafaf4a7-9745-47cb-b5c8-1107f6f0f008", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350358ab-6f64-46fb-98fa-dde07be6e16f", "sighting_of_ref": "indicator--7e51efde-ef3f-48e7-81f1-e6a21cf07d1e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f658cdbb-c2cf-40d9-a0e4-f4f577cee829", "sighting_of_ref": "indicator--21847bb6-e413-4356-91c2-05b60f83c309", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306a7073-8e00-4053-8180-3e6af74b76c9", "sighting_of_ref": "indicator--03506292-3ba5-43ee-8da3-ac6a21fa7d19", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b1982b-71c0-4908-9c84-ff9b4ddd884b", "sighting_of_ref": "indicator--6b5369e5-b2e1-49e1-92d5-3bccd808f4ad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7769078e-2582-4a4c-9219-dc94366e1f2b", "sighting_of_ref": "indicator--e391bb82-35cc-4d77-97c4-85947e27ea36", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41c3cea-7cd9-463f-b7aa-186037e8d8ab", "sighting_of_ref": "indicator--6a4bbdc2-ceec-46d1-a0f8-c808f2fc9c58", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44582499-803d-40b6-ae87-6e38a0990036", "sighting_of_ref": "indicator--2b412a3c-d679-4479-afcd-01ef0c049136", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f44f35-39b8-4332-a21b-333758367fdf", "sighting_of_ref": "indicator--38639a8d-066e-470a-ab99-7862845e17de", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5db2977-6061-4e0a-a1c0-700dda03636d", "sighting_of_ref": "indicator--756b4b81-1e57-4346-ad42-56cfd51b9a5d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea65c687-e285-4d18-a727-8fdfc3042f8f", "sighting_of_ref": "indicator--c9feab61-e501-4cbf-9f91-53a72d419cf9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5baac7c4-71d1-4c3b-905f-e965c4b59dda", "sighting_of_ref": "indicator--ae306cc2-ee20-4b7f-8f70-56cc26fab0a7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbc9a4b-6f1e-41f1-bcf2-ebdb3fd53ef2", "sighting_of_ref": "indicator--4dc91d93-daa1-4223-b515-48f9c163a0d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ecff31-3bfa-42e2-9312-9ca663b49242", "sighting_of_ref": "indicator--8a6331cb-f4b1-4692-ba40-c2ce5b7d65db", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ccf8c9-7742-486b-8f38-72721a8d320e", "sighting_of_ref": "indicator--4a5d751e-3e86-4caa-87ef-e315b444ae82", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2352d29-2a93-4977-a029-c9e583ee9ed2", "sighting_of_ref": "indicator--e8b8ba70-fe51-4841-a4e5-10fc8005ab2e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31bc19cf-17b2-4084-81b9-cbd946c09197", "sighting_of_ref": "indicator--b84c0bd4-44f5-4a38-998c-bbd57b8fa686", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1555d99-8e04-4f97-9eaa-4c43d6ea4872", "sighting_of_ref": "indicator--5d0a20db-6bdc-428f-a2fb-7daedc48845c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93ecf23-405d-43a3-90b4-9e8fd63f5a5d", "sighting_of_ref": "indicator--ed42a9d9-b7af-46af-9f5e-4181bff096a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f70776-965e-4aa6-9df1-6619e8d40ab0", "sighting_of_ref": "indicator--24069fc8-c9c1-4e9c-a0fa-3d530f067616", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14cb092-cf80-4eb0-a5ee-bbc975cf30b1", "sighting_of_ref": "indicator--7b8e7951-64b2-4cc1-95ab-e4846bf0f9ff", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc47baaf-01b1-4514-b3a2-74e9f1619765", "sighting_of_ref": "indicator--984fbded-7207-4054-be78-f732bb7933f9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa56f35c-1ed0-42eb-99e5-c8902beb777a", "sighting_of_ref": "indicator--93b7964c-2990-400a-bd33-6538e682b4e9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d50ecf-82f5-46cb-a2b0-f015fc053b94", "sighting_of_ref": "indicator--b4deb520-a8cb-4466-9294-bbf48b2ab82f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40bd5d7-2ad9-46d3-916e-80249022ce4b", "sighting_of_ref": "indicator--f9741aeb-c870-4ca1-af86-ece5e2a5a024", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399286bc-dc71-49b0-af0e-67a8992b68e5", "sighting_of_ref": "indicator--8ab66ed4-8e85-4ba3-8ad5-af8438fedc3c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca664b27-8449-4959-9730-17ea7ef71729", "sighting_of_ref": "indicator--8f42397e-eb5d-4078-b9b0-684ad0c3dd2e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0b6058-10c4-41e2-a121-af3ad6d996d3", "sighting_of_ref": "indicator--3eaa0eb5-af43-4c1b-a070-3e5cc8f464e9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1c066a-1c1b-48e8-a81f-77ca664724d9", "sighting_of_ref": "indicator--38a1f83a-059d-4c14-b91a-29c5b80bb5a3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce12096-9195-4a4d-bb54-fb50ae9a8d26", "sighting_of_ref": "indicator--69c473c8-6418-4cec-8252-6b0640c0a673", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732ea359-95f7-4607-ae5d-c2557bd610d7", "sighting_of_ref": "indicator--2616bb32-7b0f-483c-bf44-ad67d767ae12", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d191d0b-928d-46a8-a80f-9a581580add3", "sighting_of_ref": "indicator--76776b4d-1bec-42c6-9cc9-ef977bc28657", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb90a870-eaa8-4c3d-a84a-1f00b6398c56", "sighting_of_ref": "indicator--56b55a3b-02f2-40db-a02b-a4ec617de978", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9123a46-081c-4928-a7b0-f2b783552e2f", "sighting_of_ref": "indicator--5514ca0f-c6e7-4057-b570-d78fccae8046", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73974d7-0c15-4108-8246-7a7264b47c83", "sighting_of_ref": "indicator--b4972b30-9c99-4672-ad73-8aaca3620396", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5dca2f-85e0-4bf2-a8e6-7045b66503d2", "sighting_of_ref": "indicator--987a0518-3893-4dd9-bab9-5a83033224b9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba04efc-7a03-412b-991d-6da7f8885a94", "sighting_of_ref": "indicator--9c271981-2294-4174-b66e-e176b9c72579", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d73250-cc36-421c-98fd-8ed700fa6656", "sighting_of_ref": "indicator--107fa7ed-73d4-411d-83f6-7648b3ec30a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a2c9bf-ad57-4a43-8031-6c0f40ad151b", "sighting_of_ref": "indicator--1eff7479-6ad9-4acf-bc0e-251fe94ede9a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2562a8f6-c293-4590-bb8d-ecc0f593a9ce", "sighting_of_ref": "indicator--a28a56fa-07de-4519-815f-d4f50e40627f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f53282b-73a5-4072-b277-cf379b031368", "sighting_of_ref": "indicator--8a611bd5-a932-4f83-b523-e6faf4402679", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb30ad4-105e-437e-aa81-5ab5dd36e02a", "sighting_of_ref": "indicator--e1f1ddd3-d8c2-46db-b6ed-47a11e99e1e8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e01e504-bedc-4890-98dc-7f2aeeabd9c8", "sighting_of_ref": "indicator--680e38c2-5620-4408-ac7a-77ee52e24c84", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a85947-f5a2-4b74-9a93-be078a86a7ab", "sighting_of_ref": "indicator--c0083a6a-7ba0-4a22-9cda-fcdce0e5e0c9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5207ae4e-be2f-446a-b9a3-61b9bd98d695", "sighting_of_ref": "indicator--5957b97c-d461-409f-b3ee-aa8aa5673add", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8a9fe4-eae3-4087-bb76-88e23693f13f", "sighting_of_ref": "indicator--bc7ebbe4-6dc8-43e6-8e0d-0faeec57cd3a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de06265-cccf-4fde-8447-11e3add33197", "sighting_of_ref": "indicator--7bb3174b-e4bc-419b-8e64-e83e1eae9f36", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe8882c-0e95-4c40-a794-b3d13ee4057d", "sighting_of_ref": "indicator--f0bb7cde-b3d9-448f-ac87-f5ff427af450", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cdd130-e85b-4a2e-b5d6-24fe61aedf10", "sighting_of_ref": "indicator--34e5611d-a0b5-419c-ab1e-3d86121c6b6c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299a4856-a1f5-459d-970b-f5f41e2ae0bf", "sighting_of_ref": "indicator--cbfb17c5-7d14-4a68-a691-d6d2adfc0485", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be50bcbf-382e-4fe1-af8c-15a76893fdc4", "sighting_of_ref": "indicator--35655dbb-3e8a-4472-a3a7-acb5c7409af7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a7317e-9926-482b-924b-3444fbabcaa9", "sighting_of_ref": "indicator--a51e2683-e4d2-45bd-b1ac-e561dd4f8c13", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059044d9-7817-4015-82c6-8fbe31967675", "sighting_of_ref": "indicator--38211975-0485-43c1-a157-ba30fdf9ae66", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed7934d-df1a-467d-88e6-3e1e9ae7bb84", "sighting_of_ref": "indicator--ad87fa04-33cb-4cb1-9c3a-5a1ee2f4d5e3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e5f4ae-323f-441b-aebd-39069950b833", "sighting_of_ref": "indicator--f7835fb6-3192-4b91-8b75-b765b7e0fdb3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c64b3c2-984b-468a-a318-9b531a48e6f1", "sighting_of_ref": "indicator--fa28f393-2c43-4c9c-b034-bda02ffe977a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3caf663a-fbc3-43bd-bf87-ef631d0ba098", "sighting_of_ref": "indicator--59a90fe3-6c1b-4b74-bc74-d037023e0af1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29b8b00-35e3-46e5-8fc7-d9c916f7da44", "sighting_of_ref": "indicator--6e0e94c6-1ea6-48f8-bb0a-7345298866ed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79074f9b-7ad2-4c0b-8e83-62fc7ab68346", "sighting_of_ref": "indicator--cfab9aee-f077-4558-8db7-0e18fa199fb5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086c2414-bc6f-4276-8a24-5cdb5498f176", "sighting_of_ref": "indicator--50a45e7c-c164-4ebf-a60f-0599afc451ce", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a4ecae-3014-437d-9269-cf91f3420605", "sighting_of_ref": "indicator--d8787b92-aaae-4d4e-8a91-63459c08733e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d609e4f5-8cdc-49da-a375-ac988b03a594", "sighting_of_ref": "indicator--686e1d91-3243-4772-91db-a1dc7897cbc3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53773cdf-7def-47e8-b5fa-0746d5668d5c", "sighting_of_ref": "indicator--43c4d63b-ca8e-4c0d-b854-9674fecbfe43", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13aca3ab-e4a3-4612-b7b3-a35e1d4e107d", "sighting_of_ref": "indicator--c2e6b5f4-f800-4425-b432-de1598974cc6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f19c12-43f6-4a1d-8e5c-d09a2f70d913", "sighting_of_ref": "indicator--3eb192f5-f784-43d5-a386-c3d7ac0e81ab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b83d760-64a4-446c-a52e-f9bfd7f80295", "sighting_of_ref": "indicator--0d723daf-8d1a-4e37-a8b5-f185ebbba364", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60c6bd3-d0b4-4964-a030-c0729083c475", "sighting_of_ref": "indicator--1f0693aa-7ede-4a6d-8f6f-fb4f5bdd01ca", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef398d23-4ff5-47eb-a17a-5cca5206e8f3", "sighting_of_ref": "indicator--01b0a3f4-79dc-4559-9037-daa61188e244", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72134715-3227-49ef-a75b-58e75a09e37e", "sighting_of_ref": "indicator--80ff3ba2-1641-417b-916c-10271bc1ef37", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713301fb-8ff6-4abd-baeb-17a334545d91", "sighting_of_ref": "indicator--f2efee6c-6c5f-4402-b5fb-04f824490aca", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6929b49-e2cd-498c-9bba-df4db459d527", "sighting_of_ref": "indicator--93a90cb7-bd2e-4e3d-a17e-06575f04cc35", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0520a6-0e8c-48a5-9a12-6e65d10d9b29", "sighting_of_ref": "indicator--166a68c3-eed5-4fd8-93d6-1653de50d3c4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287f4e2a-8086-43dc-8c97-96bf1dc559a4", "sighting_of_ref": "indicator--7eea382d-a092-4873-8d79-4a2e0c066718", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d0202a-8847-4a37-aee7-49946fe9b9a4", "sighting_of_ref": "indicator--776b7286-7484-4205-b031-e679d1eae382", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ec674a-d2b1-454d-ad73-6af90dd5f4e5", "sighting_of_ref": "indicator--a3feb487-f4f8-47e3-86ba-192705f1d894", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d9f40a-af60-4968-94bf-d1c50227dcfa", "sighting_of_ref": "indicator--6156d00e-2a75-481f-ab68-391266f81fc7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6149e56e-ed37-4ea4-83a6-55084b968838", "sighting_of_ref": "indicator--db4f4f74-a4c8-4a5b-8380-bbb519e65d5e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fd39cd-d98f-4657-9f99-e501eadc43c1", "sighting_of_ref": "indicator--79a77a1b-bb7b-4fc8-851b-1d4d9ec04ec7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bc9b26-e484-4b0c-bcd9-7d1b6a47d1ee", "sighting_of_ref": "indicator--d989efa7-51da-4465-939a-7af3b7881cd3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b62ab5-81ce-4b4c-8b7a-5ca8e3690bfd", "sighting_of_ref": "indicator--af726017-f19b-476e-81cc-17fc4204a022", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4c9f85-1db6-4138-bc9c-89a9e263630a", "sighting_of_ref": "indicator--77e3d42b-5dfe-4229-ab67-13caac7662a8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3397e2f2-ad1e-420c-a741-98e3e578a522", "sighting_of_ref": "indicator--a8994404-1c5d-4a43-922a-6aeb0e0b467e", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d9bc9a-aeb6-4a67-b27b-5a84897c64a7", "sighting_of_ref": "indicator--12fb8038-2877-49ef-ad77-10df75046a69", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d288530-7602-43c9-b28d-b31f3646724a", "sighting_of_ref": "indicator--9f7f8ef5-fd39-49a2-a440-af4931a8cd76", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5cc2809-1b25-421e-a6ba-7f38af53aa9d", "sighting_of_ref": "indicator--2d9f4ec2-dba2-4151-b05f-371b6ff2631d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c94b926-716b-423b-9192-4bb9d87e74b5", "sighting_of_ref": "indicator--76844d53-a90e-4e08-b559-e1a668051223", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39338493-b155-4fd8-8d50-d97acb6f2226", "sighting_of_ref": "indicator--473785df-cae5-49b0-93a3-093a34d09e4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ba0ae9-d356-4daa-8e69-8dd51fade7fc", "sighting_of_ref": "indicator--9d1df77a-b684-48c1-9cd8-4e9439e55a92", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f10d037-5e23-4692-888d-d75493125a6b", "sighting_of_ref": "indicator--55c71648-bbba-4ca3-b34f-68acc8bde541", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793182ac-cc56-467f-9db8-517601113b97", "sighting_of_ref": "indicator--df2b235c-9f7e-47a5-9b86-6df8155cf258", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b199bbd-7dad-4401-a49a-5e2f53a036d7", "sighting_of_ref": "indicator--e60665d2-54c1-49cf-830a-5c62e1d7c84b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85df7969-d9d9-4ceb-9a47-20d49d857ecb", "sighting_of_ref": "indicator--535fecf1-9da4-4ea9-833d-acc5baf111be", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fafe38-e152-4dd3-9032-23b75e370bd4", "sighting_of_ref": "indicator--a6dd4289-f0d5-4155-8034-8366cccf92c9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f2bfdd-714a-40e6-a0b4-9e53439f64ab", "sighting_of_ref": "indicator--94375ee5-fa37-4eff-bf0b-82374d6e07da", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5dbd68-618d-4759-98be-d45c20f3b90d", "sighting_of_ref": "indicator--4dd8591c-497f-454a-85ad-f29cc9a38f8f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca68618-a41a-431f-8bea-24e395982b35", "sighting_of_ref": "indicator--9d7bf645-0d8e-4475-87c2-dfe7e0f0da9a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdfd017-e9c3-4f31-af95-fa6b00bdfb34", "sighting_of_ref": "indicator--f54167ad-6879-44a0-a6c2-2166373c5647", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21b8323-f9d7-4c0c-ab39-d9fae485b545", "sighting_of_ref": "indicator--ae2ef76e-a0d0-4c92-af0a-2f4e35a34bd4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b52ce5-c93b-46de-962e-bdb837242a20", "sighting_of_ref": "indicator--23cc32af-f14f-4b46-98f2-edc05377299b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a951cc-6909-4dda-b675-020bb30c3d19", "sighting_of_ref": "indicator--3ef243a6-b8c2-436b-8b5e-517e7117add1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4123b9-153a-49c2-84f3-d71da1c0e420", "sighting_of_ref": "indicator--836f0b25-461a-448d-92aa-f988da73826e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12007835-9141-4e23-b96e-7479c9477ea0", "sighting_of_ref": "indicator--49aea05e-8423-44a8-9939-aca7d39492b3", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0547bc7e-0049-46db-8fbf-25a4673d002a", "sighting_of_ref": "indicator--a8bdfec5-9753-4f7f-bc2c-3d7817627bbd", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d63cec-097c-43eb-b451-1a2e04139cd8", "sighting_of_ref": "indicator--c696da87-c49e-42f6-b003-d5a1d15d4326", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f193f094-021a-452c-8936-02d2aae5f096", "sighting_of_ref": "indicator--10a0e5e5-7a77-4299-9b0d-08ab4a3c3d45", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c2d7eb-c702-4660-9150-d87680695e9e", "sighting_of_ref": "indicator--2132dd7c-3c82-434d-a9fe-1deea021f815", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23949e9-f0d8-4040-bcaa-d29c1dce84ab", "sighting_of_ref": "indicator--b118a9e6-b026-419d-a30d-15b193709d1a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217cd513-c1d7-4564-865f-6504c947cacc", "sighting_of_ref": "indicator--643ed2d8-302f-4db8-ae46-385cd5f23ace", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4725ad5-51cd-4b35-8ea1-fb1c9852bbd8", "sighting_of_ref": "indicator--87f2fbff-e7f8-41de-a906-e3d7135c48eb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f0f4ad-78a5-4d1b-81da-baf415356cfe", "sighting_of_ref": "indicator--0173bd76-1415-4344-a312-2e542f4a62f7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd23dd5-1a6e-402b-9950-884f09760993", "sighting_of_ref": "indicator--281a96a2-4411-4ab9-83c9-0b88ed779c67", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21eac8ab-2444-4d3f-aa8a-f33bf95247dd", "sighting_of_ref": "indicator--60c850f9-ba70-4f2e-a013-f8b32f11714c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262318bb-ac6b-4878-964c-efc11ecb5b85", "sighting_of_ref": "indicator--fcfa1ab6-ee64-46a7-ac32-692343837ac3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3159f74f-749f-4afe-bdd3-18cacfd3003f", "sighting_of_ref": "indicator--0bfe1b6b-c2be-4171-b037-2ca829cb1744", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e47383-d1ab-4715-86c2-32c46b764bbc", "sighting_of_ref": "indicator--7e7a9e24-41a5-4759-8a19-9e20ecaac3d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fb3a0d-c9a0-4208-9e60-dcdbfa38d254", "sighting_of_ref": "indicator--1963c734-b340-4e44-9bd0-867323afd1c7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4544d21c-6c43-4914-9208-ee153d50e130", "sighting_of_ref": "indicator--637c9a98-2fdf-4bf8-a88b-f26596e07fd7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c21f063-937b-487b-a4b2-156463aab4b5", "sighting_of_ref": "indicator--2e007374-2642-485e-bcfb-9a56e3a07432", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2441a5f-a4e8-440b-b908-9a1b0533b58c", "sighting_of_ref": "indicator--406b720b-24dc-4dc1-b3df-c62f75b9565e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0b541b-e8f7-4fe4-abf1-0006fd4bf7a3", "sighting_of_ref": "indicator--a6cbce69-c53c-428e-9c75-c54ec2a0b8c5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9471d7-d5b6-476c-8df7-80e9c4759b13", "sighting_of_ref": "indicator--2ba3be4f-8f79-4c7f-a062-0a50d44d0551", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a636d7eb-476a-432f-9a2e-25039a5415ee", "sighting_of_ref": "indicator--401727d9-7eae-4945-ac7d-9b4d5f3e8541", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe086cfe-dda1-4722-8c6a-14afa4e55c9c", "sighting_of_ref": "indicator--5d25eabd-7b06-4f50-a507-709d1e6eb287", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd080d1d-c230-4669-85fc-ef2103bb16f9", "sighting_of_ref": "indicator--e1e642e1-df7a-45c4-84dc-f2c7c4df131c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75de84f7-0f1a-46e5-aac1-e9786f4dc574", "sighting_of_ref": "indicator--16414fe4-a333-47e3-9a39-eabecceff7c8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546da6bb-f89e-452a-9a17-e81396ce62e3", "sighting_of_ref": "indicator--1ccefef4-ffdb-4697-85c2-ccf0f1886da6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66200b72-9b34-43ea-9fe8-fdfaeedb8dc6", "sighting_of_ref": "indicator--e70b9680-b350-480b-b747-7343f0d8c2f1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff80e09-2e6b-4376-a23b-2e3d199c03dc", "sighting_of_ref": "indicator--99d7e0fb-32c4-4374-b19a-39a19e0fcfa6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd5e7a4-4aa8-4a27-bfbc-cd59fb24585e", "sighting_of_ref": "indicator--cdc6a3f9-0b65-4256-8c41-4d325d855df1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6c8e20-adf2-4f4f-9137-e0202ac5a023", "sighting_of_ref": "indicator--7ab4ef68-0664-4d0a-ae05-c33a085ac838", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781297a0-94b9-4e03-a867-f75ca91b62f0", "sighting_of_ref": "indicator--2b8bcb50-7e55-4e04-a886-ba298a1dc0f8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6565c943-0f55-4242-885d-48489664e278", "sighting_of_ref": "indicator--e8d164c5-380a-4f0f-b596-998a6afd9270", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bbda78-6021-4146-98d2-3df880e26432", "sighting_of_ref": "indicator--2300f8f6-db28-4088-b468-87b0885a6f45", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e489391b-14f9-4111-b75c-6498d90ec5e2", "sighting_of_ref": "indicator--e52fdb53-51e1-44dd-9053-9f10d3919f7e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bb0c39-db11-4af2-b566-a691e4b499d1", "sighting_of_ref": "indicator--463a3133-279b-462d-bfcc-0f42d41e1aeb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2073248c-64df-438a-8265-16d4285512cf", "sighting_of_ref": "indicator--b7f6946e-99e0-4f6f-bd25-2303bf0de510", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5816c7e-3f2c-4c3b-93c7-1722cb3ab96e", "sighting_of_ref": "indicator--e54e1916-1164-4745-acf0-3857a08c44d0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899fa76b-785f-4e37-9ebe-dd2504b2e000", "sighting_of_ref": "indicator--4d5e3f9b-40aa-464f-89fe-d906b2152693", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e83fbee-54cb-41ae-b0b8-728c225f08cf", "sighting_of_ref": "indicator--5418bd7d-a34d-4e9b-88c9-a8c2eba80ce4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b9e26e-9cac-49cb-8c63-3cf30cb49120", "sighting_of_ref": "indicator--7c9b6476-e44c-402a-a08c-3ba2c9bc5534", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb19e684-7c01-4a6d-8966-119bae11bb87", "sighting_of_ref": "indicator--f98b31cc-10c2-41c2-830e-e94b3d9c8886", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d57f70-8d20-421e-96c3-ab8e8113c9ae", "sighting_of_ref": "indicator--9e94ac77-8cf5-4948-a238-f552f518eeb6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eeab786-df01-4d9c-99cb-2e1c1586033a", "sighting_of_ref": "indicator--9fa7c61b-bcd9-4dff-b832-2e33f4464005", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a838e7-1dcb-4575-b43a-da1ab010706f", "sighting_of_ref": "indicator--aa924dcb-b314-48a8-a1d5-3994a052f83b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7197a9f-2d17-4785-87f3-d50e55987b7f", "sighting_of_ref": "indicator--2cab2c2c-0107-44ce-92f1-a4c0d442137f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c78b5ee-0c63-4d2c-b58e-4470f5d1ca71", "sighting_of_ref": "indicator--6a4677e0-9d98-4f10-97f0-01c60cf3284f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0229ca09-5603-41a3-aa56-87a3917370a4", "sighting_of_ref": "indicator--94a3de2a-83be-43d6-9fd4-fed4b2131bf7", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55119473-1f0a-4a4a-85de-6b8b56996611", "sighting_of_ref": "indicator--463922ec-86ca-461d-9d6b-1b7c50cbe652", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0effb63-6acb-4bdf-8fdd-19fb161e9c36", "sighting_of_ref": "indicator--f62a7ac7-70b4-4bc7-a0ce-23702ee3a55a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae00d993-0772-42d3-b65a-81c40b4afb54", "sighting_of_ref": "indicator--9cd0914d-ca2a-46fb-823a-a593982cba0b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6434905-eab0-46dd-9e6c-3163501e142b", "sighting_of_ref": "indicator--c6374058-abc8-405b-b5b0-64cad3cb9a7e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b83ef2-5ebb-4015-b525-988ed4513047", "sighting_of_ref": "indicator--e3ff9198-f5ee-479e-af6c-404f08939101", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c977ce-1ebc-4588-97ed-c4e46197a8e3", "sighting_of_ref": "indicator--9defd471-10b4-44aa-9045-9af65c9d8f41", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cba366f-b179-420f-9ca7-391b721e684b", "sighting_of_ref": "indicator--4147e47e-460e-4dc1-bb1a-89d1bee50c42", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df46364-ac4f-43f3-9007-c126c52062d5", "sighting_of_ref": "indicator--da5b64a9-d177-4e0c-9494-757c11a3c5fd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0c701b-8db0-4850-adb2-5d6ecec0b44d", "sighting_of_ref": "indicator--51fa327c-a630-452a-ad66-95b7be70d7f6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8034c2b4-76dd-4d5c-8bd9-0478e5be8bd3", "sighting_of_ref": "indicator--5164c732-9af5-499b-9655-c3b00dc03685", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d5958c-23e4-494b-99d3-34fa4ee248e2", "sighting_of_ref": "indicator--d50f2092-b270-4b0b-9530-20741c22e27b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87f3257-5aea-44a3-a82e-ab2dfa6acba5", "sighting_of_ref": "indicator--927ad480-6c6a-49d4-9304-f30c7bc63a48", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8140c2fd-24a7-4d77-93a3-df6e6b96b82f", "sighting_of_ref": "indicator--32a68be0-bb4f-4002-baf8-560bc04c3be1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b58849-e9db-498c-a21c-8c7dc21a0bdd", "sighting_of_ref": "indicator--c137bd7f-5a1f-41ed-89df-8dea468c8326", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac9a2e6-814b-47f9-9226-abb94b5596a5", "sighting_of_ref": "indicator--9126a14f-4bef-4510-9a6e-386dbe55bcc5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5e7798-f3c2-4d3c-bb27-d130b6ee6990", "sighting_of_ref": "indicator--58661110-4cb2-4488-8e5c-55aef9990bc9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc69329-98c0-4046-9b9a-1b178548a720", "sighting_of_ref": "indicator--6f318403-4ca0-4320-883b-cf3c96fa3b4d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be2d2b2-bfc2-4bb9-bd62-57b0e24dd2f5", "sighting_of_ref": "indicator--f173fe74-d134-4677-8473-2c0482be1aa5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3eeea85-7863-495f-b61f-019baa4e6b63", "sighting_of_ref": "indicator--c8939307-320d-4f0f-b4ba-ae81b1d39f94", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2933581-5743-4f1d-9114-8ed2bc2d5af5", "sighting_of_ref": "indicator--8240e14a-c846-4eee-bf86-09e12663062b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48ed0ca-3c30-4168-aed1-b182c293f3c0", "sighting_of_ref": "indicator--906c1052-fa49-42a7-8936-f8cfe3b3ff0c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c3eabb-856e-4fb2-9031-a957c4f440ea", "sighting_of_ref": "indicator--6895ceee-ecf6-4f60-9817-1c0dad3ff272", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c49773-1d84-4a34-a832-987eeac9dbf9", "sighting_of_ref": "indicator--9ebad54f-618b-4b4d-a202-605bf0bb4698", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84bd3c38-8665-4a16-952e-3e7edf554e83", "sighting_of_ref": "indicator--42dd5f0f-eff0-4545-9077-f0329132d201", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bed84e-f56f-4835-b5cf-c6b374712d5e", "sighting_of_ref": "indicator--f05521a0-1a1d-4a33-9064-885dc460c83d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12964f9-2771-482e-90ec-f6c5680517f6", "sighting_of_ref": "indicator--ea4536f1-e3fd-439f-be87-f2b1abdae500", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d561115d-64fd-47d5-918e-7ac315d7e60e", "sighting_of_ref": "indicator--09e5fc4d-cd14-430a-89f7-2edfb94eb8ac", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e6ab80-2757-4036-b2c6-c5a0118ee4ba", "sighting_of_ref": "indicator--d53ffa5d-ddd3-4efd-acf9-9d60833912bd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8405da-fa5c-4c2a-9875-731f04382dd9", "sighting_of_ref": "indicator--f919accb-995a-4d78-aae3-aec679c4c493", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c18e83e-6e9a-4cbd-8591-0b2d6b90eda5", "sighting_of_ref": "indicator--ca91b1af-a2bc-4c41-bb5d-0b3ffbd4388a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f21ae7-5915-46d5-8d70-0b9df6a5b8e3", "sighting_of_ref": "indicator--1878b07e-3374-491f-97a7-4ef0d4da469d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f807d04-d091-41ba-a20d-42514db8e94d", "sighting_of_ref": "indicator--112573cc-7dfd-4f5a-9eba-243e2f984269", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc963d8b-ff7e-45c7-91d3-caa5e0354cbb", "sighting_of_ref": "indicator--68ed7a86-3c4c-4df7-8d93-3833d1f67d39", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf30a92-9d8f-432b-acda-179663698ef6", "sighting_of_ref": "indicator--540ce801-9dae-48f6-9e81-475ec4cedad7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34c8a86-2030-4939-9006-4e071cbe8581", "sighting_of_ref": "indicator--a69d3f3f-5eb2-4d76-8436-f87110c927fa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0139da-1e47-4768-971d-5b9813f102e1", "sighting_of_ref": "indicator--9ec442b3-4992-452c-ac8e-3b645daa7f7d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5463e5-0f4e-4d6d-a378-8fb27806068f", "sighting_of_ref": "indicator--8200ae36-ffac-46b2-8e75-f06ab6139646", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46e6aff-dab7-4153-a6f9-457c5b395cd3", "sighting_of_ref": "indicator--172e718a-0db5-45f5-810e-605744f8d21a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abd6e99-d58f-4bff-81e0-a8dbbf9efb8e", "sighting_of_ref": "indicator--0c938fcd-54dd-4655-9c02-5ac3ddecd2da", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7215f06c-3c4f-4b52-b82b-43ca000144c1", "sighting_of_ref": "indicator--7689654c-eab3-45c4-9a3c-460f29dbaa43", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd32bd4-f707-400e-bc6b-cad0d3f56826", "sighting_of_ref": "indicator--bd4eab85-9af6-42da-8411-25eb164a9dc7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7332e8a-4ad0-4773-9d30-359a8415bc33", "sighting_of_ref": "indicator--74820379-62b5-4f49-8d90-2cf63b9d1165", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a84a47d-1463-4050-91f9-40bb8f486a6c", "sighting_of_ref": "indicator--0dd58c0d-832e-4734-832f-24b5a8c3ec82", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1ec226-7a86-42b2-9c1e-d436523fd5d4", "sighting_of_ref": "indicator--aa24be43-c6ae-4c57-8c45-6147e2d10606", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740b08d6-738c-40e0-b451-560b59ee95d8", "sighting_of_ref": "indicator--0079802b-bddb-41d1-8113-140324d38562", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0900a25-49e4-43cd-b715-123f3dce632a", "sighting_of_ref": "indicator--050fa492-26fd-4713-b564-7fc3f4da810c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92b4aa5-39d7-4dd4-b944-b1403184f5bc", "sighting_of_ref": "indicator--ebcc640b-8c87-4b83-b6d6-49b0afe37d89", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b084730f-da0f-406f-9789-95214c952758", "sighting_of_ref": "indicator--8901c51f-4302-4f52-964f-aa42870e1bd4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7238f7-b83f-40a1-a850-fef9aaabdcd9", "sighting_of_ref": "indicator--52062235-6982-41c3-82bf-8fa4d238261f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a3c4e5-1599-4832-a602-6f44af6907dc", "sighting_of_ref": "indicator--8c365dc5-b737-4fb5-9ad9-81e0f54ad6e2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7dedec5-d337-4059-84af-ee1b4203d973", "sighting_of_ref": "indicator--9b4613ba-f22b-40d3-a6cf-2e779fa58f67", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd0dd4d-b748-498e-9646-017aae5e2998", "sighting_of_ref": "indicator--c5fbfcc2-e6ad-4d21-80f9-a248f71ca189", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f00937-fba0-45b1-89c0-46ddf48a5976", "sighting_of_ref": "indicator--86410a1b-4059-4f3c-b897-0738ddefa9fa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aea622a-a795-4187-ae3b-e09d6e0b4c4c", "sighting_of_ref": "indicator--86410a1b-4059-4f3c-b897-0738ddefa9fa", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0762ca6f-4b26-46c2-a8c8-97085efc42e0", "sighting_of_ref": "indicator--86410a1b-4059-4f3c-b897-0738ddefa9fa", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2f476f-3a36-4e65-8e7e-9216c6aafedd", "sighting_of_ref": "indicator--2b03f189-556d-41d1-8d8a-c02b8b6729f7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56f1b3f-47ed-4b50-ab00-8661bd2b12f9", "sighting_of_ref": "indicator--e79b0e2e-5cfc-4a8a-b770-b9e9ff18f533", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c714de10-294a-4bfa-865c-940fca16d0d9", "sighting_of_ref": "indicator--c17d64b9-5682-4367-ae12-400f8b2471ce", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44f2212-7063-4a98-9bb7-73b51cb79073", "sighting_of_ref": "indicator--ade68a99-320d-4b09-bdc1-73308fa764c0", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c48b4f-f2ff-4cca-be50-82ac0995204d", "sighting_of_ref": "indicator--9c60db3b-4f87-4100-8eea-30325f7f1c80", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf6cd0f-4051-4a89-8004-aa9394e39ed8", "sighting_of_ref": "indicator--93879b60-71fd-4ea4-b600-20bc7b6061ef", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2d4b05-06f5-4cfe-b865-6bb4d99914bf", "sighting_of_ref": "indicator--350e1b09-aa6e-4b2c-8e42-6c3793f81657", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569717da-b983-47b8-8503-d89eb268e8bd", "sighting_of_ref": "indicator--bfa67805-8e47-4943-b4b6-ad4a8f92f3a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461b2c3c-1c94-45ba-87fd-e26a647de42b", "sighting_of_ref": "indicator--a4ae9f58-cba5-4d00-a717-88427aff8371", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1935d70-a644-47a1-a87b-b50fa4c98b1c", "sighting_of_ref": "indicator--35df841f-90f3-4585-a92d-acc8394472db", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85e0e80-dd55-44b2-8eeb-ff4f66f400f9", "sighting_of_ref": "indicator--72aadad3-e6e6-40dc-8371-c0d2be1aa082", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e3d510-fc89-4c0e-9121-018184d20bba", "sighting_of_ref": "indicator--672cb12d-f5ce-4037-9f88-1b8ea8f72db7", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc4bf59-b07f-4d69-8466-f941d4556b86", "sighting_of_ref": "indicator--7ebd1985-9a23-43d3-a88a-1eab75ff94a3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d650c3-3d19-46a0-b60f-a63412ccb94b", "sighting_of_ref": "indicator--49b3580c-6449-410a-bf91-f4086ac9e219", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2126de49-5124-481e-b4d7-e3853803fa96", "sighting_of_ref": "indicator--d1651c3f-0d2c-4a0d-b4d3-36926473b559", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f8fbc4-1d7f-443c-b21e-933b9120c0ab", "sighting_of_ref": "indicator--5732f9d6-b8ab-4a41-9adc-7c38ce849d16", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b8779a-60e8-4737-87b3-08d0786d305e", "sighting_of_ref": "indicator--5732f9d6-b8ab-4a41-9adc-7c38ce849d16", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64015738-685c-4b53-a610-5a0c092d3139", "sighting_of_ref": "indicator--5732f9d6-b8ab-4a41-9adc-7c38ce849d16", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8615d310-d850-4000-8fbe-5276edf28818", "sighting_of_ref": "indicator--0c0feae1-5dd3-47c8-b1c6-f3b2914fb1cc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427983d8-34fb-40af-ac33-a74c6549b717", "sighting_of_ref": "indicator--ba0e67a3-129d-48de-9228-b60f90095cae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00d5902-c653-4489-9089-3230deba3134", "sighting_of_ref": "indicator--5516d9da-05cf-49f9-84fc-e699c1d929b7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fbb3b5-865f-4b74-9c74-a527448b3b53", "sighting_of_ref": "indicator--abbce99e-7e17-48ce-8562-fef6d09371c5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d05d5bf-95a9-4b0d-826d-8e10366158d0", "sighting_of_ref": "indicator--9327767f-cab9-4190-a54e-6b8e11173b1f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6760e53-080d-4978-800c-0b373902fe14", "sighting_of_ref": "indicator--175ef6ce-334b-48ca-ab13-079674bab1b6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333c2383-9630-46bf-8d99-92130ef889b5", "sighting_of_ref": "indicator--f708d9d4-ab20-4d85-93a3-f20c48ddd2c7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbaebf6a-5d2d-4975-ac4e-179bfe1070e6", "sighting_of_ref": "indicator--54b40dd1-e9b5-4fca-b7b7-474a7cf87746", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113d0cd1-7ecd-438b-a7b6-880bd2ad6172", "sighting_of_ref": "indicator--6cb6fe33-5ad5-41a9-b08c-19af52f9c6b3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6462f02-0b14-46a1-b9aa-176ecfb52908", "sighting_of_ref": "indicator--4c3be525-c6a9-4465-945d-b1be9d0e26c4", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365d8d77-1ea8-497d-a145-d8a9cb4a37fb", "sighting_of_ref": "indicator--ff354167-ddaa-46fc-bd9a-7fbcc6492074", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1918270-7b5f-45b5-a869-75906d9679ab", "sighting_of_ref": "indicator--25d82ba2-042b-44e7-b338-d6f763649a4a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471623ca-aeac-44c1-bc2b-345370da2c0d", "sighting_of_ref": "indicator--5190c959-7c00-431c-9b87-13b6b5aa3c5d", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d910c08-463c-49ba-b019-c2a548392f9f", "sighting_of_ref": "indicator--00ee64b0-0358-4053-b072-5bd9bf25baf3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65d9753-c76f-4b2f-8bd2-f653c1cd317b", "sighting_of_ref": "indicator--14bebcd3-9ca2-48a0-b4b6-40921aae7108", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7117b7e-4037-4f8a-8b02-661bbacada28", "sighting_of_ref": "indicator--bc948bb8-8b3a-46f9-95fd-3693762d03a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1faee3cf-11bb-4d5d-b306-12623d4d0920", "sighting_of_ref": "indicator--e38e53f6-4af6-49b7-bd59-7c056be38473", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859ad065-f464-482b-95ff-5ec2ad69b7ee", "sighting_of_ref": "indicator--d814291b-9e0d-43f7-aceb-05a066ad6859", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23df07aa-e43c-44b0-8317-f0efa24221c9", "sighting_of_ref": "indicator--5239c146-b79d-4bd6-9f64-ac47d8913c75", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4e0eea-71e6-47c5-a644-bb6a690dbb35", "sighting_of_ref": "indicator--b8eb05e1-21e3-4b1f-89c5-5d3ad538acb2", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4885bb37-e7b3-418d-aa87-adc2e4505613", "sighting_of_ref": "indicator--59ffb069-3bbc-4d88-9996-0de5720a17e8", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e7847c-7f24-488a-afd2-6440dd48900e", "sighting_of_ref": "indicator--5b777320-d0a3-44c4-89fe-9752e456aaf3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95105512-9d50-4a2c-bbe6-6f5c2a5c4ab0", "sighting_of_ref": "indicator--96f766ea-2f86-4899-a9b4-3e0110c5ee9a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca06c190-e785-4b8c-a2bc-e0ffb3407c4d", "sighting_of_ref": "indicator--d5108fe6-a5fd-4fe5-94ed-1217593bfa7a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae75717-2acc-4e66-9e1e-78ae6c1a6ed4", "sighting_of_ref": "indicator--137d1af2-c3cb-4d3b-b8bf-0f0a41984d34", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812fc6c3-492b-4dcc-94a0-7ad879ff7bfa", "sighting_of_ref": "indicator--4b9f2fa5-4984-4832-b2a7-f02fc9e70fdb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf7fe96-246c-4c6a-b695-f6f452470c68", "sighting_of_ref": "indicator--7f781772-3a2d-4546-8748-5f60fce4ed29", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45acf13-d233-487a-b8a9-1d47739d15ff", "sighting_of_ref": "indicator--546e9e4b-c232-4d1c-a940-34886c9f67e3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907dc72c-c71e-4f9a-aea8-60224148b179", "sighting_of_ref": "indicator--61b6ad88-77f1-4968-9175-1f321e6951be", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62a8d4d-20a8-4644-88ff-3e33e519e533", "sighting_of_ref": "indicator--b1cf4b8f-e79c-45b2-aeff-3e8f991709e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d61a208-3c83-457e-b83b-1318d40f66bf", "sighting_of_ref": "indicator--944457ab-5492-4ea8-81f6-88e6312ea65f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d89153-7df4-4a9e-b2ae-2a812d2accf1", "sighting_of_ref": "indicator--65cf2448-7459-46c7-a276-e0c59b8c0de0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec08e4e-8dca-4bb5-9aae-6c16501ec9d1", "sighting_of_ref": "indicator--a64c2486-5c03-4d90-9e0f-b2d5dce8a887", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886ab513-0b0a-410c-adfa-dcc4121bd204", "sighting_of_ref": "indicator--f8e57c16-14b1-4d62-a6ec-4bd50c2403c8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eec98d3-0984-452b-8468-1fb703d51fda", "sighting_of_ref": "indicator--639e7cdd-d5ee-4f4f-92dc-48374bcb1d73", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913adc14-ee45-4679-9abb-3085f2d49c25", "sighting_of_ref": "indicator--8d4159e8-db46-4f3a-8405-71c78de53dc0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a79113-89cb-407c-97f0-95d59c026430", "sighting_of_ref": "indicator--7baff99f-0c82-46bb-836c-ee53dde6a9c4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc7c096-610c-451d-bab1-150c2e883971", "sighting_of_ref": "indicator--abdb692a-73ed-4614-ba47-a7fef99f6091", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a841718f-50b3-44e6-8d1e-0571660aefbc", "sighting_of_ref": "indicator--394b480a-e6b3-4810-8f4b-e0ec46d0d0e8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b727fd0-eaa7-406b-995a-fc90367c1f26", "sighting_of_ref": "indicator--b0261d53-6749-47dc-92f3-0568e9a5a0ff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a70d111-bd39-49c3-b19f-9faa000e8712", "sighting_of_ref": "indicator--2c72bce9-7c9c-4e24-8208-bc6d7bd9b6bb", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b425f165-bee2-441e-bcc3-24f556a9a86f", "sighting_of_ref": "indicator--9fab996c-bdcb-457a-a8d6-8a0033cc6600", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49af546f-318b-407a-92b1-13d828814d90", "sighting_of_ref": "indicator--289cf685-871e-44d9-ac20-edda3633897a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b15aa6a-3c77-4d55-829f-8da489a2568f", "sighting_of_ref": "indicator--995ef135-cd3f-43f1-9902-6c384fa9fb85", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20c7f05-06d9-4cf9-8521-6380b2abff25", "sighting_of_ref": "indicator--965acbee-929f-455e-aba6-2d0521784f2b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0685ea1-f1b8-4ea3-ac06-f41d13eb9224", "sighting_of_ref": "indicator--fa4b96f6-1592-4404-9bca-3e3bcdf93ba4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6ec91e-122f-41ba-b98d-87357280d1b8", "sighting_of_ref": "indicator--329347ac-b003-40ab-8a2e-0cdcebd95325", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d665bd3-a376-4d36-897d-66df18d596ac", "sighting_of_ref": "indicator--6473b416-6468-4955-ae92-8bc694d9a355", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e7591a-4b86-4a00-a812-bbae7167eb88", "sighting_of_ref": "indicator--f223ed1c-fdc8-40c4-9931-3c8b7b8608ea", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9ee193-13b9-4435-bafe-d3977fe9248f", "sighting_of_ref": "indicator--1b94b2cc-79a2-4bb1-b59f-6a033d7b4e43", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98165286-e849-4c3a-bbee-16b1f28faccf", "sighting_of_ref": "indicator--212656ff-4bf1-48df-9bd4-7f296d41ab69", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d725a5-a6ce-46be-bc5a-0821502ed10c", "sighting_of_ref": "indicator--56967b4c-cda7-454f-9c64-7e0e5e8d1eab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab83dfcd-5798-4ad8-affa-f9cb97fab7b3", "sighting_of_ref": "indicator--add9e0ed-cc0f-465d-a804-fb17463e80ef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544bd6f5-bdc2-4914-b4b4-b6c85c656b8f", "sighting_of_ref": "indicator--a4d7431c-cc29-46e7-affb-1667d6f05eb5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a31902-b422-4819-b7a4-1a729c8e90c1", "sighting_of_ref": "indicator--d5167dd1-33b0-4715-a4aa-32b80e8a6403", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40df1269-6f57-46ee-8875-9291ccf43d19", "sighting_of_ref": "indicator--af2a99e4-6b4d-42ab-891a-442b26347123", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb83155-b913-4b3d-b1d1-7f4622fe702e", "sighting_of_ref": "indicator--bd00a194-78f7-412a-9bf1-7800c856b9b1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada5cfe3-f253-4629-b8a2-3ab3e79b8ec7", "sighting_of_ref": "indicator--b2dc297d-6818-438c-8ada-d744b3a60436", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6fdf58-25a7-49a1-a679-dbfa7f1df632", "sighting_of_ref": "indicator--c80c2a60-f7e1-4015-ac39-36390fd11c27", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952308df-a520-4d7e-8200-0572fc3a7dbf", "sighting_of_ref": "indicator--88d99b3b-9f9d-4d9b-b965-9a1f20451957", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243a87f9-98f0-4c12-8c51-a4b73bafd04e", "sighting_of_ref": "indicator--ac292469-2fad-49b6-bc53-4484d0716db0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a24d39-139a-43fe-9762-1dd37ace5d6a", "sighting_of_ref": "indicator--d8f2a050-5924-4039-bffc-938a73ecfeef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a822a32e-ec20-44c6-956a-43b2b4b0b870", "sighting_of_ref": "indicator--387c6fd8-e55f-4880-98fe-fb59b5c5031b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7d0af4-c68d-4867-a8fa-c792f7f2551c", "sighting_of_ref": "indicator--f92a8e04-7196-4aa5-9776-c11c47e7934a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e51eaf-f22f-4f3a-a011-c9d6a1488ca7", "sighting_of_ref": "indicator--dbab1bd6-b80c-4d2b-ba94-1cce28f26692", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f32efbd-942a-4457-af12-04a2c0d52a91", "sighting_of_ref": "indicator--f8a98bf4-6149-40af-aa94-cfc0e9621752", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5919763-1100-4d22-bee3-eca6e2f6d4d5", "sighting_of_ref": "indicator--7a0db8e0-d2f3-47fa-9f53-804f01e63e6f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23af4e85-ebfb-4073-8d3d-d6a87ea326c5", "sighting_of_ref": "indicator--0bea3eeb-f6e5-4038-bdd6-a9abd6424d80", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6216e12e-8aaf-44a1-a202-305fb2b5ae01", "sighting_of_ref": "indicator--2d3ec85e-2301-4d04-b8f3-57d10ae7c16f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f95212c-0e01-45f3-88b6-5e897574b35c", "sighting_of_ref": "indicator--bac3d79b-1e1e-4990-9528-f6d4fb3ce6cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf9be89-0477-4d29-87ef-214f316d3f9f", "sighting_of_ref": "indicator--bcd7cf01-0f54-46e4-84e7-b94d5a1203e1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204e681f-bb98-416d-8fda-ac7b48564e10", "sighting_of_ref": "indicator--91448805-2cf3-4c41-b2a1-d911e8580bd4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3dac765-1e44-4a8e-b662-69c40a8605f8", "sighting_of_ref": "indicator--d49b0b80-94cb-453a-b709-6266ed6c59cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d012195-dd4f-40cf-903d-02c97fe1e73e", "sighting_of_ref": "indicator--e55f3167-bd2b-4805-ac24-db62dcef3535", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b9f1a0-3f5d-4a3a-b641-2a351f97c9d1", "sighting_of_ref": "indicator--a902c79b-55d0-482f-82e7-b2ec199a8c69", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689a660f-51e0-4344-a410-9b386abe957b", "sighting_of_ref": "indicator--1a0ddb9c-baf4-4de9-bbd7-a4b3164fa3e0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd323910-90fa-4d27-89ae-8ff4e96e8fa6", "sighting_of_ref": "indicator--f3459768-cfd7-4e7c-9da9-6ff32358000f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34cfccf7-bab0-4049-9bb6-329b6e8102ec", "sighting_of_ref": "indicator--06e1b41e-166f-479a-befd-67af60c3a65c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39584c91-43ba-4996-b4e9-608864c5628a", "sighting_of_ref": "indicator--d4efd8be-210a-49da-bb6f-8d023eb428af", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a234045-7e48-459d-b121-e43ac35287e2", "sighting_of_ref": "indicator--2e423d2f-4342-44eb-b952-57ee937576c7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee758f59-68dd-46d4-951a-71dcd32f193d", "sighting_of_ref": "indicator--e89c6b40-530e-4e44-a255-f76078378f48", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc292c2-1c5e-4326-88f2-888addbec34b", "sighting_of_ref": "indicator--049bbd41-4367-438f-ad1e-d45fb565bafb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bb2b2f-4ca6-4d96-a137-83eb0d2ed941", "sighting_of_ref": "indicator--cb6ab603-bd45-4249-bf98-1d6e039cff3d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96809ee-7551-497a-870e-3d2d25746821", "sighting_of_ref": "indicator--67565ee0-1a91-4c96-8688-012c59dff085", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b6aa96-655c-4cd2-8422-7829361870a6", "sighting_of_ref": "indicator--eab27782-fd65-4621-b1c3-1fef799795ac", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72c225e-1954-48ce-88e8-5b51f267ac88", "sighting_of_ref": "indicator--10313e0c-7d31-468f-8f2b-c3197859ca13", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3964e3c4-2e09-4e09-9ae8-dcd0ff900fd7", "sighting_of_ref": "indicator--adbfe115-4d56-4684-804b-79522e450863", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e850bf84-1d1c-4c5d-b67a-c4eae0c41b9d", "sighting_of_ref": "indicator--6b31bd63-7e57-4386-a728-3d5ccc6c589d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2816fddb-bf56-4524-8964-b878f1950411", "sighting_of_ref": "indicator--47d6e59e-f95c-4869-90e1-7a7128dfeb91", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688bb9c8-6f3f-4692-a670-3639aded3b58", "sighting_of_ref": "indicator--520cb98f-7c73-4551-a6cc-1db3c6ad4166", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77d986b-8572-4bb0-884d-8680a83661bd", "sighting_of_ref": "indicator--a45c71ee-2c85-4301-88f9-f2a858cda92e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0632d277-d2f5-4ea6-9c80-d615fe802641", "sighting_of_ref": "indicator--48acb021-0558-4fa6-aeae-0784f86c980d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97ca095-a637-4fa3-b2fa-e0f6ae0b815a", "sighting_of_ref": "indicator--55ee8583-bf4d-4894-a298-3a0a16188135", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5379f73-57cd-4e7d-840f-6e54c034f670", "sighting_of_ref": "indicator--28f68c05-fd73-4bba-bde1-251e1282b793", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfef3a7-6911-4596-aa46-ce9f022a1409", "sighting_of_ref": "indicator--e425e276-3cd3-4237-9c88-df56b7dd40a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d466d9a4-7452-479e-94af-6936402f567f", "sighting_of_ref": "indicator--8eb9ef06-a46a-47fe-b6c7-4ca07496b0bd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea89587-9691-41d2-ac53-ad3636bd3a99", "sighting_of_ref": "indicator--032ba101-8a21-420f-982b-7898baccf61a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b9370f-6681-4723-8d23-e65867fed762", "sighting_of_ref": "indicator--6ce088c2-bbd3-4bae-8de2-4b43eef12416", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54debcc0-cfe6-46e7-91ab-6936e1ecc065", "sighting_of_ref": "indicator--21a90172-a6a7-4bac-9bdd-d6a1d54cccad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df9d562-98b6-4b30-90f7-c66038ccbc9a", "sighting_of_ref": "indicator--0c70c29c-e25b-4caa-9bfd-697cf0adc813", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9e4a51-b774-4adc-bd1b-a38ef8cec3e8", "sighting_of_ref": "indicator--60cf025c-a986-4379-bd72-48214c20819b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6475d1d-a58d-427c-86b2-e0331a96e5c9", "sighting_of_ref": "indicator--9f2e4ef7-e2be-4fee-93f2-9544695cf306", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c66844-7dba-4269-a6cd-9ce94142d576", "sighting_of_ref": "indicator--4e7e248c-3dbb-4d91-98cc-873763b82536", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc46f9f-fc17-4239-a6f0-26dda8d4292f", "sighting_of_ref": "indicator--0d2458bc-e085-4735-b148-2ad60f4244b0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3262ecef-4141-401d-80e0-f87911b4c599", "sighting_of_ref": "indicator--6d922335-49af-426e-a62a-d1b15f2bfbb8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04888b5-3a71-4dda-884d-094c572f5720", "sighting_of_ref": "indicator--a8844204-62dd-490a-ab11-72f24985a191", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8fee0c-cbe2-4dcb-bc82-6d3f068b1fbb", "sighting_of_ref": "indicator--5701d379-d920-4bb0-9103-156c867a9082", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4803ec-e306-4297-9acc-ccf0def71751", "sighting_of_ref": "indicator--8c356df1-50fc-42d8-921e-63c4fa84987b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd2fde0-3a6c-4eb7-bd72-a92066bc55dd", "sighting_of_ref": "indicator--05251cbf-8740-4b36-b45e-4dcfd6c713e1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e8cea9-b48c-4324-aa59-e99393bf6932", "sighting_of_ref": "indicator--250c44a5-4e09-449d-b031-8fc819b98e99", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df42858e-c4f6-4a97-bc62-53949938644b", "sighting_of_ref": "indicator--2e04d737-037c-4f98-916b-444e8680f5ed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff1eeb5-1734-4cb9-a855-8e85f1836ab8", "sighting_of_ref": "indicator--1faa3661-5372-489f-beea-b6ef91023213", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa0152a-f8f4-4f75-b9c2-b52d9b8eba34", "sighting_of_ref": "indicator--e0d507b1-fc43-40cd-b568-d3e0b4eadf14", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd358bc-0e59-4414-9710-baee1a03dd9d", "sighting_of_ref": "indicator--cc53b187-0095-41b0-b98e-2a926b44117a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98979f52-83aa-46a6-81b0-cd1cfa437798", "sighting_of_ref": "indicator--470ad83a-a409-4da3-8abd-e584f8395d0b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2964d5dd-8ec2-41ad-b1ba-70ff4262127a", "sighting_of_ref": "indicator--9cad1779-62d4-41ac-aea1-6a90059824f1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92e6ecb-1925-4187-912e-6272309720be", "sighting_of_ref": "indicator--493a49cd-72bf-442b-918a-ee8d6d167676", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d820782d-4c86-4933-961c-76a88a7bb9b8", "sighting_of_ref": "indicator--ae8b7a36-a2d5-43ee-b271-f18d2dd70b7a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0cb03cd-8f7b-4b23-8846-b6e625c64d3f", "sighting_of_ref": "indicator--499ec082-4836-43b9-a53d-c4aac70d0bda", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60bb8a4-fb55-466b-9a06-fa5fabf0315e", "sighting_of_ref": "indicator--52dec87f-073a-44ff-892e-f1563633e7ad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bbed89-3011-45fe-8785-4fece15d84de", "sighting_of_ref": "indicator--52844bb4-c1db-4026-8fed-768f5966a8be", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b8935c-5fec-410a-af05-1e514813d380", "sighting_of_ref": "indicator--73d3e8a1-6907-4539-a7ee-34881cafe756", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804b994c-ff99-4e88-a2e8-9ba5b990a2d8", "sighting_of_ref": "indicator--91422cea-bf05-4311-9baa-d90e1b3b6385", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71022a6e-3809-439c-9872-3bcfdac0ae0e", "sighting_of_ref": "indicator--71930ec8-17a3-4ec4-8863-ad256d81d978", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a44016e-3254-4af3-8355-e5df293cc811", "sighting_of_ref": "indicator--aa0a9539-26d0-49fe-bbc8-d46403ff1f37", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bdd859-35de-48c3-a3ab-17b9398026bc", "sighting_of_ref": "indicator--ab5c4a81-3e4c-435d-961d-11a467971020", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671847bb-e111-4a60-9970-e6a7f058da3d", "sighting_of_ref": "indicator--6283756a-acfa-487c-b7d3-6eddabedf19d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d56d789-18c5-42c1-a7e9-e9349692aa49", "sighting_of_ref": "indicator--c2cf9df6-1b58-46f1-8097-c7f0c1c66163", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10351960-faab-485c-960b-55d5f6b1c51d", "sighting_of_ref": "indicator--f32ac144-1c92-4bed-aa7f-6f3a84c7ea40", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30cc7ac-f9e5-464c-aad1-e4ec7be7f295", "sighting_of_ref": "indicator--44d41c44-aa46-4c3a-97ff-dae73185272a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b9b03a-6eb7-40c9-8818-55d42c1e4372", "sighting_of_ref": "indicator--e828013f-ab42-44ae-8974-dbbf00ec366b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f0e13a-b074-43a7-bc25-4f372a297c11", "sighting_of_ref": "indicator--60bd74dc-8576-4aa0-a217-d5cb5ff7bf9f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf207f5-4fb5-4ee1-ac91-89f31a90144e", "sighting_of_ref": "indicator--78beff75-7096-40d1-8ab2-60469f1e7c53", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a69d91-d402-454d-9f52-43769357b905", "sighting_of_ref": "indicator--f89b4f74-eebe-4fc7-8225-270f72c0d5c3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ef2ccf-4b5d-44ce-915f-ae0dd9c532e4", "sighting_of_ref": "indicator--614a1f2f-173b-441c-8186-398ba9c5ca27", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1267bd1-8aca-4820-adf0-432abd06df8b", "sighting_of_ref": "indicator--85618edb-540f-4cda-a69b-9185fc963c4f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5effbf-b26d-4b0d-9221-51134dd3a351", "sighting_of_ref": "indicator--0eff7535-7fd1-412a-916d-213f25a7f727", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daec11c0-774d-482d-8fe8-aaea0d7a8ad0", "sighting_of_ref": "indicator--6ce8a4c4-16dd-40b6-bd25-b4901a8bd2a3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a559f8-25b3-43ea-a220-ad1b4ffb5852", "sighting_of_ref": "indicator--edfd5d9b-7254-4ddf-9b2e-59c2993be66d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef61fc63-915d-4042-a4f9-ef1ca39f87ca", "sighting_of_ref": "indicator--96557098-cb06-4a25-90ba-0d921322efd2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707c54c3-9075-4b0b-8abd-fe46a7ac1f2b", "sighting_of_ref": "indicator--ca51db4f-0158-420c-9cbe-560e5040da78", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86230fd-7a02-47c0-863b-4405e22fe452", "sighting_of_ref": "indicator--7ad6267b-7c1c-4eff-acff-fa63013ee103", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f3452c-0150-4fc8-9ebb-aeb32e82194e", "sighting_of_ref": "indicator--d041fe1c-e58e-4539-8cf1-f8f4c82328f3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6189d533-72bb-463d-a96e-f6d2ea2ccd62", "sighting_of_ref": "indicator--ce1cc65f-586d-4b2c-82c4-cb3de5db3fd4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509ce7b2-98f1-4e55-a17a-6e2fac76e196", "sighting_of_ref": "indicator--67907515-f50d-49cf-b8ca-b9ac75741932", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2189f30a-f74a-4ec7-b7c3-6aaa83ccc855", "sighting_of_ref": "indicator--d5a67de5-90bf-4fa2-9a0a-d00ce18a4a31", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a42949-3d12-4667-805f-0319ab351088", "sighting_of_ref": "indicator--753a1834-798d-4785-b1d8-c5f161c8c42e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe871180-4c9c-4dc1-bbc5-51fe0e162116", "sighting_of_ref": "indicator--e0355dcf-a55a-481a-b7b5-18cb2e7927ed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6716cfd8-aeb2-4cfd-8cd8-23593e8e8237", "sighting_of_ref": "indicator--088bec09-bd9e-461b-904d-dbd5126acf30", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebce8d41-bf49-4e09-94e6-d9d99d11799c", "sighting_of_ref": "indicator--55ab7c2e-2da7-43ef-8b9e-ab9afbdbaf63", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b3fbed-5b19-4fe0-a89e-99798f2cde2f", "sighting_of_ref": "indicator--bb10fd76-0068-4846-a29f-f9168901d6a8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ecc36b-a08f-4ec3-b105-754436e16c05", "sighting_of_ref": "indicator--85c6b0aa-b88f-455e-95be-5ddd12b3948a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef4618e-5f70-4459-99dc-c69bcc6ecd5d", "sighting_of_ref": "indicator--d523c1c3-03ad-436c-ab1f-5504b290d2c9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ac61f6-980c-4bd3-81f1-c2ec9401bc79", "sighting_of_ref": "indicator--6a870699-bf5f-49c6-93c1-29dc20b1ff14", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a12113e-d0bc-487a-92a8-4c4ff7745c03", "sighting_of_ref": "indicator--aa7a67b0-a812-45d7-947a-b1e8a5b4effa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018c70a2-8a12-4447-ac8c-7228baf54085", "sighting_of_ref": "indicator--cc6c90c7-703f-4174-b41f-5ba9f292f459", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d72a69-6294-4d25-ba09-632cb60c033c", "sighting_of_ref": "indicator--ef2b401f-d5d1-4290-b190-9b88da9ad08a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87326b32-4299-4686-b042-fe5ea2f32438", "sighting_of_ref": "indicator--93621f50-ac4c-4778-87bb-840462540114", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc50f9e-0b68-402e-bd20-9515f0ccd37e", "sighting_of_ref": "indicator--6bd5e4ea-8bbd-4b4d-b868-be4a0f2a543e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f4f0c7-1266-400a-86ea-c5596bd8b840", "sighting_of_ref": "indicator--ea7efc90-9ae8-4335-b739-f305211f87c7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557d2a4d-b37f-4e8f-a590-46518fe5ef69", "sighting_of_ref": "indicator--80e4c999-c179-4d46-9d85-963c320d2d30", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec2a432-ce1d-4296-819c-4ff0ed865b7e", "sighting_of_ref": "indicator--248e7a83-ff27-47c4-bcad-a3c7ad59e6f3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853b5a33-9c45-424e-b8b4-173f57ccb535", "sighting_of_ref": "indicator--8b1a1803-0bca-40c8-b413-307e69ff15f3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10475fcf-26fc-44ed-b28d-693ba446e45b", "sighting_of_ref": "indicator--c7ff8ef0-cc33-4740-99e8-345b7c46d370", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2dfd09-f9c8-4895-b5b7-d31793c773ba", "sighting_of_ref": "indicator--ce86cf4b-b0d2-430b-bdff-c1b67315604b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d541984f-a375-4848-a279-662cc6fd4dcc", "sighting_of_ref": "indicator--fa9b531b-daea-4761-80dd-818a2ed676d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4b287b-4411-4c23-ba6e-98dd57aa1ec5", "sighting_of_ref": "indicator--6cc5afd5-db4d-4f32-b8bc-dd8e5f18da19", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4f0e9e-6009-4cbe-899b-37f6e3b05dc4", "sighting_of_ref": "indicator--dbb8ffca-259c-41fb-b631-d10812331b40", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f629a91-116a-46fe-a666-92b625da3fd7", "sighting_of_ref": "indicator--e486a30d-cfa9-4f28-9353-11b90d881f1c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c330b56d-5c8a-467c-b3ce-99101ca40c2b", "sighting_of_ref": "indicator--cdd5c8a3-0235-4e0d-a49a-6a930dd58210", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b000f90-e463-48ac-b562-ca3044e8fe9c", "sighting_of_ref": "indicator--7a216b1a-d519-4848-b057-71302b3cd5f3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3738538-4287-40e2-8af3-80baed58c777", "sighting_of_ref": "indicator--6bf13b03-8720-4445-acc6-eae458a584aa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72df45f5-28b0-4570-9229-48ced1d59530", "sighting_of_ref": "indicator--1a83b50e-3b87-458c-bccf-84db264b12f7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076c8da1-2121-4c49-a98b-1848350af068", "sighting_of_ref": "indicator--e6925157-f5d3-42da-86d9-c9e724e33676", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb265c2-6451-4df1-9ec3-619701b0a296", "sighting_of_ref": "indicator--5cc2f47a-3fd4-42ff-abb8-ee3664b909fb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909e04d9-5d41-4751-97b8-4edf4a5c0d12", "sighting_of_ref": "indicator--a490931a-535f-4409-91ff-c8c6f91697a2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1f0e86-6c90-4f05-ad55-d91d4b9a093d", "sighting_of_ref": "indicator--7cd3f345-9af6-4044-bcda-b32251d006c4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4c8a14-2920-426e-b3c8-2652ceff0c91", "sighting_of_ref": "indicator--b0822ceb-d32a-4ebe-9670-08a7d223a9ba", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae34f93-baaf-4d32-b948-4e75213d1ae4", "sighting_of_ref": "indicator--55bf5001-ceb2-41c7-abae-7668b6fd12fd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb07ef6e-44c8-4e73-b9b1-3bcd068b57f7", "sighting_of_ref": "indicator--7a24564b-0082-437b-8f89-cf935d5cfc29", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1ac42c-b064-4dba-873c-4ac4d8522034", "sighting_of_ref": "indicator--70ba62dc-eeef-4efa-b92d-2804549cb865", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc26f14-4917-410e-9b99-2184a9a6c39e", "sighting_of_ref": "indicator--d1237cb8-dcad-4b39-8f04-f2f61cddc26d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a058f816-6f67-4df6-90bf-679ebe7bcd20", "sighting_of_ref": "indicator--5911b860-2d99-4063-80cb-f9ae19ff5e45", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d32f39-0f58-46a3-bf90-aee3c5432875", "sighting_of_ref": "indicator--5808c9e3-20d2-447e-aad4-a8dfa446142c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03f35f7-9159-4e75-b2f0-6ec95562c1a8", "sighting_of_ref": "indicator--e604247d-2489-4674-8c01-8889f8b1f40d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4d253e-f08d-45f1-9b0e-f7f6aa626ce3", "sighting_of_ref": "indicator--406a71a9-6f68-41fd-8fb4-ab0d5aeefb56", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886f7ab3-e924-46c1-9654-09b9a2cdb9a3", "sighting_of_ref": "indicator--fb3a62c9-25ba-479d-a641-e8e92e7dea06", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a168de-7664-4fee-ab0f-b1a6ebe404bd", "sighting_of_ref": "indicator--0ff2c21e-5e59-4186-b7ef-f2241868d194", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddae384-c394-4c3c-a063-a5e65fee6f32", "sighting_of_ref": "indicator--3c4ac81a-182a-4e31-9e75-d2e2d9110e7e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ac49d0-837e-4520-aaed-b99170627f78", "sighting_of_ref": "indicator--36bdca77-1ae0-40d7-8c40-78308416ecda", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efaf9150-a0cf-422a-a78d-0abfbf1490f6", "sighting_of_ref": "indicator--8aeeebfd-0680-4985-8222-1e2ab7ebdadf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561d70e4-cf10-4782-b2c5-e4547985605e", "sighting_of_ref": "indicator--0d85b392-0847-4cbb-9541-adc6c5f45f78", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ef8d9b-a8ac-4df4-b92b-c02b7433a561", "sighting_of_ref": "indicator--46de64d0-7e95-4138-9a21-332c07419a3c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163de67e-7ebb-4b48-b8fd-7d39f2a091dc", "sighting_of_ref": "indicator--f1616963-8f31-4296-8de2-25cd7d987501", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8576d75-b753-414e-875b-496609d6cb0d", "sighting_of_ref": "indicator--fa1ef19f-a161-4295-ab39-86ee0249ab5f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74c5134-0785-42ed-9535-ed25ffc2c1d8", "sighting_of_ref": "indicator--652680b7-ccd6-46fb-9a5a-fd0ac88b7aed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6072d467-74d1-499e-8cc8-1c47af178e16", "sighting_of_ref": "indicator--76557651-3cae-41a5-90b1-3b7eae1d4545", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d17786c-20e7-4bb4-9b1a-aace5f2cdcad", "sighting_of_ref": "indicator--afe578c7-bbf2-4867-8e93-1460458087ee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51da04e8-72d9-4c62-9606-b86d2b96fbb1", "sighting_of_ref": "indicator--f6537f7c-53c8-42aa-8fe7-e48832784c46", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e71f65-1b30-4f20-ab7f-b02bf7111c29", "sighting_of_ref": "indicator--2641a392-661d-43eb-bf9b-335645b94c41", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9143664b-123f-442f-a76e-c3992bb3b3e2", "sighting_of_ref": "indicator--467dbe2c-a74f-4e85-89aa-740956ec61f4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38c9aca-d121-4f7b-9ef2-fe5b2d000bb1", "sighting_of_ref": "indicator--aca0bf1b-1ffd-4e27-8d83-fd0214fd07a3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c00bd53-80ef-4ca8-829a-6d68de9f8e80", "sighting_of_ref": "indicator--3d5b5281-9dcf-4982-8c72-a95954a04735", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5594ca-4d45-4a8f-ac8a-08ebe52aed02", "sighting_of_ref": "indicator--f9657909-a8db-4c5f-95fe-c6cd20032465", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff03086-3d2f-4a15-9a07-d1223ad88673", "sighting_of_ref": "indicator--6ca1b54a-beee-4661-9e97-ba8412076d1b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a70ce4-a4e5-4b7f-b152-9e77419c7814", "sighting_of_ref": "indicator--1a0f49c0-9319-4402-891e-e077a3de7da0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb353d0-731e-4faa-ab83-7ec5962640cd", "sighting_of_ref": "indicator--78f0de85-4aca-4c94-afdd-6f143215e27a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344d615e-2a56-44c8-b2ac-05a95c9f466b", "sighting_of_ref": "indicator--2f3f045e-fc08-4090-943f-09447499ca3c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7de106-d910-4f07-8177-81983bb407ff", "sighting_of_ref": "indicator--1dd5c904-919e-4742-ae91-5cc905d11d4c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a690d1-78de-4e1b-b09b-318111117213", "sighting_of_ref": "indicator--b2b4a9cc-be62-4b0d-a3cc-0be0d33dcd3b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c017be33-2202-4dc0-a9e8-30a3ee178395", "sighting_of_ref": "indicator--af78a690-047e-4612-9c2e-3cc2feaabaeb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cc21a8-786c-493b-8f10-1a565d617e95", "sighting_of_ref": "indicator--94836c50-de3c-416e-bd60-311ab42a019d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57dfbb33-09e9-4b25-a9aa-7f298bb68025", "sighting_of_ref": "indicator--14e0c3f1-1607-4d76-b129-60c709e37f6b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8712cd82-37d5-4b72-80dc-4909a3918949", "sighting_of_ref": "indicator--7a735ec8-631e-4ff2-a875-2d9ea41fc9b1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca3d822-073f-4432-b5ec-95c98cecd754", "sighting_of_ref": "indicator--11840748-b255-4bb1-8a2e-611b7ab73130", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca44a27f-34ed-478e-8dfa-26467f3ac366", "sighting_of_ref": "indicator--010dd9ec-8557-46f8-879a-d108eb1c4f16", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1d6502-969a-4d03-9743-f69bfca03791", "sighting_of_ref": "indicator--0aa4a4fc-f8e8-4bd1-b358-51250f7cde91", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5670dd9-a85f-4510-bdd0-e6e84bde90cc", "sighting_of_ref": "indicator--635932ce-388a-47cf-8e9d-d095247297f1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77ff3fa-c81a-41b1-ba8f-03a0c9b66ab3", "sighting_of_ref": "indicator--291b6e1a-0a2d-4fb9-91c8-9225c97b5549", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387c4a42-4130-413c-8a23-849fcac665dc", "sighting_of_ref": "indicator--9a7645d2-0098-425f-92f8-262628bc4d6e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6296dcf1-c23b-4325-9163-80038c2077a1", "sighting_of_ref": "indicator--965451c0-52a8-45a2-ae33-29ce694bdacd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528b2dff-3782-4eab-a7e6-e84cdb9097e8", "sighting_of_ref": "indicator--87f5112c-ee83-4151-9090-13743da1ab3f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724420b5-7d08-4126-b339-ebc08a398ce0", "sighting_of_ref": "indicator--ed2197b8-60ca-4f24-adb1-864381d627fc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f7c775-35ad-49c3-945a-4d50425e6921", "sighting_of_ref": "indicator--7deb05c7-e41f-400e-ae21-930a4cd522bb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c79b03-5429-4dff-be29-1d46e6534611", "sighting_of_ref": "indicator--759a16ac-f84c-4db5-995c-ec937149df93", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107602f9-0458-48ae-bca2-442e93f938f7", "sighting_of_ref": "indicator--561fe128-875d-43ed-ba80-d8078d628718", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d026ec77-1de2-4089-9a27-5909d1f1b16d", "sighting_of_ref": "indicator--afc072ad-04a8-41ea-86c5-03db2e7d8b5e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eef090e-7aac-4277-a61a-ec0164a0e487", "sighting_of_ref": "indicator--e53a40ff-5962-44ba-91b3-234312880e8b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6421456f-4438-4fa0-8f90-6dcd31c660e6", "sighting_of_ref": "indicator--4361ebfd-2f38-43ac-8bbe-83b0ee3ef2f9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630c2898-cacf-413b-b9ed-d56e2604b1b5", "sighting_of_ref": "indicator--eadea2f6-dabb-451e-8e0c-58c4c8f9cc7a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ca5442-39e6-49d1-87a0-a105c2490a71", "sighting_of_ref": "indicator--e8b08249-eb9b-422f-9d7d-6e164ed17049", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc066f5-5ecd-49d0-9dfa-00b94887a758", "sighting_of_ref": "indicator--f3c655fa-6a18-416e-9f7f-d05efcffdbdf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce08906-a3e2-48e4-b9c1-d0e455bbf115", "sighting_of_ref": "indicator--c6e135d4-0fa4-4717-9119-388c0fb202e7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902c3c75-73a5-4a96-b75b-46d927ba027f", "sighting_of_ref": "indicator--c9a3a93d-5760-4f15-9df5-ffdaa03bd4ac", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1955a6d0-186f-434d-8044-8f649f8a8528", "sighting_of_ref": "indicator--c2344306-d33a-4451-8c5c-a8ec2cb0368c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df68c61-9cb4-424d-8e0f-c82c9ab074f1", "sighting_of_ref": "indicator--b8da786f-2ebf-4ac1-a8f0-a93f33c86ce0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42aa34e-4b83-4c25-a33a-212cb4b9190c", "sighting_of_ref": "indicator--6d9c0054-03c8-48ef-be3d-b32dbe583f78", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30769e23-681c-4b2d-b611-496981a941d5", "sighting_of_ref": "indicator--d4dbbfdb-723c-46de-93cb-567d04a603b4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc35fda6-bb84-415e-a82e-7523f742ead9", "sighting_of_ref": "indicator--49654007-bbea-4d82-b4bb-b3a5a3e67f4f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76068145-52a0-4dea-9bf1-4bc588edbb52", "sighting_of_ref": "indicator--a476cf66-93b8-4fe1-b3cc-78415a90f5e5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24c2025-db65-4d42-a3d1-4b81f79f7274", "sighting_of_ref": "indicator--da3633e4-1018-45ce-98e0-c370586c27c6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2951bd0-ca0a-4091-a7c0-f54cd93f0207", "sighting_of_ref": "indicator--321c483d-f2aa-4f9d-bfba-ddf4834b1910", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a8682f-3eb7-4dbe-86f4-2c81e7dfcbfe", "sighting_of_ref": "indicator--6688ff40-48e7-4a9a-9685-7f99a1585382", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d3011f-ffb7-4176-8628-e0fcf41014d6", "sighting_of_ref": "indicator--244d990c-7305-44da-90bc-d008436e2466", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ac4faf-bcc4-4ffb-a34e-aee2b899b626", "sighting_of_ref": "indicator--4294da88-a50c-45c9-a0f3-8621caffdf47", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b560374-5c33-4258-be31-02590ec94d1f", "sighting_of_ref": "indicator--57d64be5-6531-488c-b873-f2289de8b1f5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a195c5a2-c3d4-40fe-90b9-f4873d2e8686", "sighting_of_ref": "indicator--057bcfaa-3360-441b-80c5-8c936a3ebe98", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ba5d1b-3de0-4d31-885a-aa30e89fc450", "sighting_of_ref": "indicator--0a3d0b75-d7c5-4d16-b058-9c33c1f945fd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d0abf2-acbe-4efe-8850-0c154c3b657c", "sighting_of_ref": "indicator--0cdd6073-ee3f-4c96-a883-e08091401996", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b251af-dddf-444b-86bf-2bb8b27e699e", "sighting_of_ref": "indicator--bd54e3da-4a70-4b57-aac8-2e943a713758", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865bb3e0-a9dc-4288-95d2-a795d5ddacf2", "sighting_of_ref": "indicator--e56ad6f2-ebbf-41e3-91b9-25e21adc1cae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5637a73-4d05-4f3b-be5b-845711809e86", "sighting_of_ref": "indicator--ce669a29-45ec-4355-9943-8524910eac1e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96dfd73-ec3e-46fa-be53-9d764b5747a8", "sighting_of_ref": "indicator--276290ee-7b5e-4bfc-82a5-ecf369ceba0d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a0ad10-3cc4-4e6f-bd50-d65d9eea0339", "sighting_of_ref": "indicator--413370bb-b758-45f6-8cc0-33bd7f119f68", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b905b9f4-dab3-43bf-abc1-cbaae205dd9b", "sighting_of_ref": "indicator--16866043-18d3-420b-91c2-eb753402d387", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0e9cb1-f684-472c-a345-0cf99fa90143", "sighting_of_ref": "indicator--a034f3fe-7310-4191-adbd-c6b43220d413", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766df638-b363-4d9f-88b1-35cb8f8bb010", "sighting_of_ref": "indicator--081e939f-6d87-4d83-8973-cb7d811a0c16", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c4bdd3-8d04-4c8d-8570-3b51305489cd", "sighting_of_ref": "indicator--ce28c6e8-4437-4593-918e-ea85b51b43bd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad9fbc2-cde8-4a18-adaf-69a358bef982", "sighting_of_ref": "indicator--a5f538a6-4a40-4770-b5d0-d1cea406c331", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf28e1d-4a8b-4456-8c76-6a00a4fa57c6", "sighting_of_ref": "indicator--afd7e7c8-dec1-4bec-a33e-16f2d4cbcd7d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5b9838-d5bf-4e6b-bed8-14a0184a4e40", "sighting_of_ref": "indicator--afd7e7c8-dec1-4bec-a33e-16f2d4cbcd7d", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcf3c0b-09a2-40af-ae94-9423c9d9788b", "sighting_of_ref": "indicator--afd7e7c8-dec1-4bec-a33e-16f2d4cbcd7d", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e8a7e55-891a-4599-b337-a93a21f0a64b", "sighting_of_ref": "indicator--dd5659e1-7f17-48ef-b11c-2daf5a7b7155", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539fdada-5d2f-4cb4-a520-7aed08ddb7bc", "sighting_of_ref": "indicator--d628535d-161e-4b96-88b2-2246f40b19b5", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e07e65-ae56-4aab-a49b-82b03db79e42", "sighting_of_ref": "indicator--586264ea-e24b-49db-b4a5-543dea6502ca", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afade02b-882d-4262-a0f0-66fa01618a9a", "sighting_of_ref": "indicator--7e79bfb9-cf43-4eef-b439-a6f628a7ef7c", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14980b89-cefc-4639-8bba-6f4f88ad940f", "sighting_of_ref": "indicator--d30590c1-c74e-4f4e-9c81-21eb6d105bb5", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93de9d28-7344-41c8-9a3e-3b55c9ec0c19", "sighting_of_ref": "indicator--d5adea57-7a0b-4da7-a24a-92c808d9215a", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010ba97c-698f-436b-b71d-2009ee2c5ca9", "sighting_of_ref": "indicator--b6289a95-1117-4714-9e1a-5abe41ab892e", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb1b697-cbb2-470a-acb6-26804a3c50b8", "sighting_of_ref": "indicator--c8f1b076-6b83-4c0a-b7b5-ad77d7c21381", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61165024-3aff-4bfc-933e-0e60b59201d4", "sighting_of_ref": "indicator--e519fb87-0f4f-4922-a31d-ec7f4d8fcefa", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b688cabc-d07f-4ea0-b789-71df03e699cf", "sighting_of_ref": "indicator--9f91830f-8170-455c-a694-9c0227484884", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cceadd-c1be-4fd0-badf-d9ebf7f8f2a8", "sighting_of_ref": "indicator--f644ebf5-5474-4be6-a4ff-21ceeb935559", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3085b7a9-a89e-42e1-9fd7-59b60445904a", "sighting_of_ref": "indicator--0c80af8d-5fc1-4ddf-9bf5-d6809b1b91ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f2f79d-ddb0-4b0c-b296-2c31f7a40ef6", "sighting_of_ref": "indicator--bbb24c05-e738-497f-b129-c04ad15ba7f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c188e904-a5b5-465a-a87a-e3e1dce353fb", "sighting_of_ref": "indicator--5e05d33e-eb4e-4fd8-9706-3fba5ad8663d", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76de52cd-8c6d-40f5-b151-388b6da4340d", "sighting_of_ref": "indicator--f3be2492-8e04-4d84-9d1a-1d05028eccdd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c873b6c-8e67-4b39-b265-5a515ff0cc0a", "sighting_of_ref": "indicator--3e41b70d-6a41-495c-97cf-0bfab2ea5827", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a896dea-3ac9-4e0d-9b14-758f4ca8268d", "sighting_of_ref": "indicator--93353ca1-d734-4e53-b7d0-e6db7cf8194c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85f394c-a6bc-46e6-aff1-cdc4453c0d46", "sighting_of_ref": "indicator--6707c4ab-54bf-4017-a256-087f16817f42", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211021cb-11f0-4ded-8044-f4db4f365f03", "sighting_of_ref": "indicator--b14defba-85ca-47c0-b5ac-7f719fe55be4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fe9e19-b014-4c45-9084-de58af0464e8", "sighting_of_ref": "indicator--371e5102-1dc6-4eed-9008-037d5e654626", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ecb2c6-5898-430b-9171-67f53da1a51f", "sighting_of_ref": "indicator--a8366d17-393d-4945-8533-0f31c519e82d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53dec584-4bf3-4e0b-804a-9789d58818c7", "sighting_of_ref": "indicator--4790f7df-f2ac-40e2-8818-2cab0a673efd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1608948e-7778-4df8-b51d-ba34214950bd", "sighting_of_ref": "indicator--d53c19bc-26f3-4f67-a455-060475e9c63a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3028e7-2a1d-4926-bcd5-c1f00d213b52", "sighting_of_ref": "indicator--0730bf82-be75-4b2c-8bd8-d6d742633421", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0021771-bb87-4f89-9476-046e9c2887bc", "sighting_of_ref": "indicator--9ead8e6f-f3d9-4afa-9528-df087e115f80", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a82b0e9-b89e-4046-a42c-28d2c5caf6ee", "sighting_of_ref": "indicator--d5bd4c16-2b23-41d9-930d-b18fa2043d76", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca03dc6-5440-481a-bdfa-cb14b433211f", "sighting_of_ref": "indicator--95e41356-8cc2-4fe2-9f22-aa943d008bd7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485bcc20-919e-4b84-a59e-1ab23105cbe1", "sighting_of_ref": "indicator--cc83848b-cc54-4aac-bb76-e0972e110779", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0878cc8-3716-46a7-9209-ea5ca9d2ae9c", "sighting_of_ref": "indicator--f1381e11-c6a5-4e94-a50c-e2a734e280a5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2eb520-a213-4894-93c1-dbf8b322380d", "sighting_of_ref": "indicator--f8fa1ed6-89ac-4670-b6cf-b4bf04b9095f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646e78c0-ce86-4659-bdfd-fc73f359e8da", "sighting_of_ref": "indicator--91dbc875-9aa9-4e34-8520-f1c1bca3b737", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a298e2e-bdee-48c0-a5de-f6373a251f93", "sighting_of_ref": "indicator--f606f18b-dadc-4e94-83e4-f2295a2a2053", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b88c908-f720-4fb2-8131-24a729320382", "sighting_of_ref": "indicator--bd1437e7-b54c-4d6a-ac76-fbcb51548c22", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d3912e-82a5-42ef-bf2d-b0a207a0c125", "sighting_of_ref": "indicator--3e1785ce-5425-48e0-bbcd-b9a91354453e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a5a4dd-0136-4ade-ad9d-36e974b5eeb2", "sighting_of_ref": "indicator--86e67736-5f44-4364-8c13-428210c44da1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897e22b0-d308-49ba-a599-f63c83df9b1f", "sighting_of_ref": "indicator--62de2804-a465-45fa-8233-cc2a10eeae9c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0849635c-788e-4b80-b0f1-33b65aef3828", "sighting_of_ref": "indicator--97df8f11-fdc9-45a3-97da-6edb6513b647", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7017b8f-d846-4f29-b987-b8e80a857b47", "sighting_of_ref": "indicator--bf6c0a68-a68d-4bdb-89fc-500680341adf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd30fb22-0962-4148-ab28-d83a7db1e276", "sighting_of_ref": "indicator--0ad8d8c6-d39e-4ffd-b978-19fac1925218", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59147c9-a44d-4f66-aad0-01759269abe0", "sighting_of_ref": "indicator--66488b76-a70b-47a5-9546-b092e88848e2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828b1acd-0bc6-4d1d-9489-99582c1038c6", "sighting_of_ref": "indicator--9086e98c-6266-47ea-b18e-4778a975f4fb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2de9efd-ed40-4171-ae64-284ce95e5415", "sighting_of_ref": "indicator--d6ad77ca-f83f-4e0f-957d-c33b131613cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a281cb5-c028-49c6-a9c4-cc457d7b6387", "sighting_of_ref": "indicator--095a3e5c-572a-40cb-9a7b-66cb71893220", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6287b8b-624e-4885-872e-d3d59c4fb621", "sighting_of_ref": "indicator--1a9f53f6-d949-4525-a10b-bec3dbb020f8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29699a80-2a90-4a4c-867d-265032e069f0", "sighting_of_ref": "indicator--f61dbcda-0ff6-4f3a-beba-1b62826b66d1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295be93b-b1c7-4cf3-b5b8-470713b08dc7", "sighting_of_ref": "indicator--ac5e2ff6-2909-43a9-8146-a6b9af3dfd00", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205b6f87-6b08-4d94-8f40-5d54f28c5a6c", "sighting_of_ref": "indicator--d067e99c-a7ab-4144-90a5-f9e6f4e881a3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5e5d1b-5feb-4a96-9882-7a4b9c2d6e54", "sighting_of_ref": "indicator--282e0252-77e1-44d3-ab0b-9fe0a3fc9e55", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09b5424-169a-4714-9634-6fb15724be56", "sighting_of_ref": "indicator--bcd8d9d9-9a84-4ffc-aa85-cb036a402bfd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2ab00d-06d6-4b90-908f-449cd17fd804", "sighting_of_ref": "indicator--3979f051-6089-4089-a10a-b3d742a3830d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a7d089-be93-4df2-a889-f90af075c9fc", "sighting_of_ref": "indicator--a90b4228-9fa2-422f-a219-a9a2ee0f04f8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fb67be-0a4f-49a7-a4a0-3fabfc182c80", "sighting_of_ref": "indicator--994ab290-4df8-4ac0-9baf-9bb5884be817", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e0a9a0-68ff-41f4-b099-862fcbfcb21d", "sighting_of_ref": "indicator--863e981b-69cb-4d36-8815-0e10a2e16b24", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46777f43-5405-4255-a559-e09c9b434abe", "sighting_of_ref": "indicator--c5f2a170-7f13-42d3-b85e-2f653cfb9bda", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4ed465-be0f-4dc5-8db0-b1f2c116b163", "sighting_of_ref": "indicator--39f093d8-70cb-482a-82fd-38448ebd3ca2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce553482-6395-4c9a-8bc6-5c84da35357f", "sighting_of_ref": "indicator--f9c094d5-58c5-4d1b-b998-6df622880552", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36cc1248-04e5-4084-b923-3f1505e00ca5", "sighting_of_ref": "indicator--bd4c9a3b-6346-438a-b03d-b77fff84df7a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b56e2c-8c8b-4135-b6bf-cbed709c03c8", "sighting_of_ref": "indicator--caa86f5a-d85c-416f-acfe-9a729f5dd79e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36cefd2f-283d-40ac-bec7-43efaad59bb3", "sighting_of_ref": "indicator--54363877-8c57-472c-8e99-dff8ee1b0a02", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950d2993-4e3a-45c8-9233-0bef8985b185", "sighting_of_ref": "indicator--0a9b3815-8863-4ba7-9229-8672067a19c4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e7e1c8-26b8-4f8c-bc61-58de083ec087", "sighting_of_ref": "indicator--c8f104e5-3171-4201-8eb6-191c7cc9afe8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3bbc90-cc9e-42ee-b5ac-97a5c89d8660", "sighting_of_ref": "indicator--29e46f99-b3ef-4af3-b289-a32dd8eb89b1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45fd96e-712d-443d-8b9d-370fb18a2f21", "sighting_of_ref": "indicator--9f29566d-25a4-45f0-853f-b398bd791417", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb5451f-d31d-4891-b405-c9cbb40204fe", "sighting_of_ref": "indicator--d0bc45e7-6957-4be6-98cc-e2047d10ed4f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92000b3b-8fca-4b1c-8d2e-95d89a0831f9", "sighting_of_ref": "indicator--435d90c0-9d12-4a3a-b27b-e81b2dc5a700", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b3e50d-907d-4821-9075-723f7f26d9d2", "sighting_of_ref": "indicator--49fc46d4-0dc2-473d-8c77-3094a3c15b1b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f7896d-decb-42eb-a98c-be036ddfe100", "sighting_of_ref": "indicator--ffc01ac1-1396-4592-b9eb-09fd1e57c498", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093aee82-d88d-4615-8ac8-2b6d7da597da", "sighting_of_ref": "indicator--a96bd2fe-9d9f-4680-9db2-fc736ec3d305", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d560596-72e3-4dce-81c0-24ba6532fe8a", "sighting_of_ref": "indicator--aa225caa-cda3-4246-8c27-d07eed58456b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f664c41d-0fa6-4a6d-8d65-23d2a51a4877", "sighting_of_ref": "indicator--4830cd61-2cce-4261-9124-5a2daa91824f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097f6efb-f2e3-418a-a617-9528ab640ee4", "sighting_of_ref": "indicator--0d71c35a-e45f-4651-954f-559e3a55d289", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d988397-b403-4e93-9e49-10af93a9ae61", "sighting_of_ref": "indicator--8d0d1756-86ad-44a4-926e-680077c7e36f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5be9b0-b870-432e-bef5-7ce9072fdd9c", "sighting_of_ref": "indicator--d080d624-f71e-4241-9664-91df4c651b4f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce545a9-84ca-4004-879e-b99a4d30ed7c", "sighting_of_ref": "indicator--d825cdf5-1a8f-4930-8433-d39f8baa3069", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2c4632-8bf1-4027-a97f-4acd1f325215", "sighting_of_ref": "indicator--6a09cb84-1c77-4f51-aa5c-8a1f80be4f75", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ca33ce-9cba-4d4d-b949-6d07fe5900ff", "sighting_of_ref": "indicator--8aa46263-1f97-44c2-a7fb-875f0c89a6d0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469a95fe-e34b-487c-94b2-f423bbb946ca", "sighting_of_ref": "indicator--12bf153e-fae5-4b11-b009-98c7796c4cd1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1452ce-0889-4afd-a6a0-05ee9ed97a8a", "sighting_of_ref": "indicator--dcfa7fe4-d4b7-4048-980a-7419775b9f02", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee1048d-c296-446a-80cc-bee513d17ac8", "sighting_of_ref": "indicator--63d04940-e71e-4361-8ce6-d560e00ffcd3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f75ae7-5663-4f5c-a2d1-4593fc871f95", "sighting_of_ref": "indicator--8a766d3c-06bb-486f-b18d-98deb08828cc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb74749a-b795-492a-997e-36c073e17a49", "sighting_of_ref": "indicator--9988d7d1-538b-4b99-b416-96804a16428e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7b2932-ca10-4235-aff8-207791024832", "sighting_of_ref": "indicator--e658a2a7-c7d4-4201-b1ab-8d106ec80139", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb75fb2-a015-4beb-8672-a8f61a5b1f87", "sighting_of_ref": "indicator--37948d56-afa5-4a50-ad89-a345c8e8e262", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b871785d-074a-4cf4-a328-b1cfa41d11c9", "sighting_of_ref": "indicator--421191f9-9fb0-48aa-b3b1-82af1f788aef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b73e55f-9dea-45ef-9115-543a7c2fa227", "sighting_of_ref": "indicator--3ce09c1d-2939-458a-87e7-a9eeff636e99", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2e66f1-a1d5-42f1-8a49-f9351892658a", "sighting_of_ref": "indicator--4e5decb9-443b-4348-87de-3a0cd51ac227", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b23413-35b4-4669-b5c5-110ddc8a749e", "sighting_of_ref": "indicator--aad42a6e-6c57-4a24-8c9d-58b011f59154", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d66d827-3c93-4943-aca1-c7a550698fdc", "sighting_of_ref": "indicator--1f5cb73a-3032-4c76-96b1-aa3ecb97d6b4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12655f76-d185-4e09-aeb8-ecb3c681bc68", "sighting_of_ref": "indicator--d9b3769c-46c9-4473-9ede-84a91336e4bc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799dad5f-9c93-43f0-8d7e-1e6eb1608f22", "sighting_of_ref": "indicator--0e43286d-db6d-4e30-9e90-b9e7d85b6fc1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7711d3e1-e279-455f-9d6c-868ac75e3dc0", "sighting_of_ref": "indicator--88657051-5a43-49c2-9fb2-35c7e31cb1cd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c63a24-5e2d-407e-a425-0b6a451acf1b", "sighting_of_ref": "indicator--082fcb0d-4fd0-42cd-b0c1-c95fffe51da7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71cc314-5724-45af-9fe8-42c98f56153c", "sighting_of_ref": "indicator--38498206-7125-4992-a1c2-89828e3d2fe7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e050e5f-709c-427c-b5a0-4259517fa2c9", "sighting_of_ref": "indicator--6cd5b459-ade2-4a2f-b388-715e58a5a693", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587659ed-7788-4cbc-8f32-67dd9e0ade86", "sighting_of_ref": "indicator--eef1706d-05a2-4517-8d43-3cd626048b9b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af3beed-3480-4c88-855b-e25a8a225220", "sighting_of_ref": "indicator--ae2890c7-e76e-40c0-b58c-4b7c290c828c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6dfc8a-5c34-49ee-ac62-064bd29a2f78", "sighting_of_ref": "indicator--f7aaa21d-a4d1-4e28-9ce3-55685f72f4cc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37824ceb-b22f-4451-a8c5-80cbcfe80e09", "sighting_of_ref": "indicator--4338d00f-d830-487e-a043-806015e7fe2a", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5a1fdd-c829-40cd-ae83-a20e7b76c06f", "sighting_of_ref": "indicator--537eccd9-0237-4553-b07e-68b0171c7442", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb54af08-e48e-42f2-8cf5-4db7123bb991", "sighting_of_ref": "indicator--a5b6d116-3adf-4b49-85cf-ea7dc3497e7f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488b07f5-6c50-400d-9a9a-02825c6778ae", "sighting_of_ref": "indicator--9ba0fb83-2b41-4d7b-9846-9b56fde48326", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526fe214-445a-4f98-8523-18d27f8c950d", "sighting_of_ref": "indicator--75f82856-d1ea-4511-aeb6-0a585d202079", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfee9cf7-bdd8-43d6-833a-6726fde7ef3d", "sighting_of_ref": "indicator--d9998f19-d870-4ed9-8192-b120a6354fcc", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe1a5e6-6570-4e41-9938-253d0403c839", "sighting_of_ref": "indicator--f13efcbf-53ba-47d0-a2e9-27b723018fdb", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28f03d2-4c07-495a-9802-3efe7b1633f5", "sighting_of_ref": "indicator--6a0100c9-76dd-4809-8ef5-ed74b09641db", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d369bb50-2b03-441d-b092-ecbd9c922a1c", "sighting_of_ref": "indicator--e247729d-f7b0-40f5-a65a-d82d1e1070b8", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87a68c0-0c45-48a2-b8bf-fc5fe7dd35ba", "sighting_of_ref": "indicator--8cf3d945-9f3d-4704-92e5-8a0611d3804e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1451ac-392e-4532-9249-67d8dec725ad", "sighting_of_ref": "indicator--29d80ac9-892c-43d6-b434-92ec697db7bb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9025af87-c5b2-43c5-be2e-90ee5397e7fd", "sighting_of_ref": "indicator--a833e90b-b364-4549-beec-b555ee854058", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014ff74c-1f20-4f8f-a865-6be951c39ecd", "sighting_of_ref": "indicator--a8ad8dba-908b-4794-b5ab-f7980ace0bde", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3a4582-2fb5-4313-85b6-99a6714bdf91", "sighting_of_ref": "indicator--3ebfa742-9781-4b77-8437-e8390f62810d", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfec00ce-dd8a-4d80-903f-9143830eff48", "sighting_of_ref": "indicator--4ba50046-b3b7-4b2a-9ce5-589f7e1d5648", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb67789-1b9b-46c2-aa3d-96e9e77e1a62", "sighting_of_ref": "indicator--69920431-5c23-427e-83b6-c2a8f56ee398", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4ad396-1ec8-4c0e-916b-23695b770681", "sighting_of_ref": "indicator--2b1afb8e-1d6a-4f1e-b9dc-cdb84e6ef464", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837ce43b-024d-48ee-8d6c-65ad86f4ef0e", "sighting_of_ref": "indicator--00bcc74d-bb55-45fb-8646-ad8b2535cc3a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7c6b54-72f3-47c6-8816-bc8cc8b9e74c", "sighting_of_ref": "indicator--332ca248-6613-46fa-be0c-1ac37b372176", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9035bde-1b73-41f4-95e0-ff72010209f2", "sighting_of_ref": "indicator--00040895-f4f8-4172-9a4f-7a847f63abca", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7fd99b-7315-4dc7-899d-3e7ab0048f99", "sighting_of_ref": "indicator--002557c4-0eb0-4e1c-8745-3d8203168447", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229fd4a8-c2e0-4f02-8330-e3b5609121b3", "sighting_of_ref": "indicator--11b87d9c-09cb-42a9-aadf-6c4531c54911", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59673898-9093-452a-9567-cd7e3b93e04b", "sighting_of_ref": "indicator--612dac02-703f-4562-9464-0d1766ad9d0d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db320c69-fb52-4613-991b-c3235911940b", "sighting_of_ref": "indicator--fcf9556c-a5a4-406d-806c-3fb82a02637c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebec04a2-e013-49d4-8ada-c246d897c183", "sighting_of_ref": "indicator--6cfcce5d-b4ab-4daf-b0e4-319af195cf5c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf174dee-d499-441c-834b-bb326b196e8f", "sighting_of_ref": "indicator--aaf15fac-9992-4035-a784-a132d65d9097", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d74e2f-f35c-4525-9b34-f7fcb40d473e", "sighting_of_ref": "indicator--77464c5a-da3e-4f43-ab4b-caa6d21334cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a622c1-c4e0-455a-bcc5-ca0acf72d41d", "sighting_of_ref": "indicator--6fe067c2-4785-476a-a893-19a6a90b756e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabf1815-b679-4743-989c-1ca122f2421a", "sighting_of_ref": "indicator--93e10d44-968d-4a7d-a804-39770cf6e0ab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b2775b-a78e-4085-bf4d-7d472f94da1c", "sighting_of_ref": "indicator--b9977d9a-7c65-4241-8586-45c1231b1b26", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1799beb2-5bf7-4c10-aafc-7fe03f9ef72c", "sighting_of_ref": "indicator--405846d8-7a82-4a7b-85b6-3d251b77482c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46868edf-ca76-4e9f-9542-a9d4cd4baf8b", "sighting_of_ref": "indicator--62e5bca8-1e71-4019-8b7b-66aaaf966a82", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3aa98d-87b8-43bf-96db-150b6ef0fd45", "sighting_of_ref": "indicator--e09e30e5-0cc8-4cde-a09e-7f5d4f169b4e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed4e513-97a7-4da8-b8f7-0a22ec43e493", "sighting_of_ref": "indicator--1f3b76b3-7aad-48bb-871c-419c18d5af59", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec863daf-8a52-48fb-93e0-657551dfda13", "sighting_of_ref": "indicator--c6f92192-2cad-4829-9bca-f53117a10d2a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5adaa6da-fb08-4862-ac5e-85503b7a4ce5", "sighting_of_ref": "indicator--3d377d18-77d9-4fb1-8a14-5b9807ea131e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f376ecb6-ee75-4a2f-8b06-d0b7359b184b", "sighting_of_ref": "indicator--6046d94a-550a-4b22-8b12-6f93931cd4dc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11752157-ad5f-4c7a-a3d6-9c386a9a5b93", "sighting_of_ref": "indicator--6ae7df93-0320-4c46-970e-f87ad8b8b9c1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974353bd-fcaa-4f3f-acc0-637834b21745", "sighting_of_ref": "indicator--f24cef18-771b-41d3-9733-c56ada47b5d4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf8ae1b-ef1d-4045-8e03-5cdab46fe1fd", "sighting_of_ref": "indicator--72c5f70a-c273-4a95-9b68-8cc0a8b63506", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd229d1-987d-47ca-a791-8c259222c3eb", "sighting_of_ref": "indicator--f79b01d3-c63c-4590-8a58-b50d4c2ef1cb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5cbf17-54f3-4c9a-a03e-d91149260947", "sighting_of_ref": "indicator--24e56ad9-56bd-4a16-b960-4c31df356290", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adb2b3d-a729-4a1f-9ade-4181dffd95d3", "sighting_of_ref": "indicator--cc69d8a0-82ae-478d-8eb3-74dc33ac4424", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67eb093e-7a27-470e-9a24-2ecd7a8029dc", "sighting_of_ref": "indicator--e4d365a7-c351-487f-b21d-72c84d0e696c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1abfe2-12bb-4494-b498-63385d33e0dd", "sighting_of_ref": "indicator--f0ea7204-0362-4f24-87da-abba5302a2c4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567629af-da1b-406a-9b66-7a390917ecff", "sighting_of_ref": "indicator--369efe74-f07e-4d0e-a150-7a0efbbda385", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbc8bef-1d07-4e5b-a4d3-9930c8f9b878", "sighting_of_ref": "indicator--8786de1d-dc0d-4ea3-8e9d-df9b3122be9c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c94000-2eac-4937-bd5d-29e12d79628b", "sighting_of_ref": "indicator--f5c19147-8aad-47e1-8256-b2f1d613f080", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a748a471-44c7-414b-a98f-a95fb1da63b6", "sighting_of_ref": "indicator--f3cacd87-ace3-4537-8576-58194ffff3f9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69406d5c-9fa8-495b-b9cd-b803aedfacbf", "sighting_of_ref": "indicator--51c0672d-acf6-408a-8ce1-4dd2008d6b91", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629c1c4b-1751-4b47-954d-19c474347a2d", "sighting_of_ref": "indicator--4aef8e33-3860-4401-b810-b1d6b7713508", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710f587f-7f72-4186-8710-3f32a4ffbe98", "sighting_of_ref": "indicator--b96eccd6-e38b-4a09-b1da-2b05be7b64f1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4fbbbb-9dce-4525-a221-1dd40794741a", "sighting_of_ref": "indicator--2e88a9a8-c6e7-4909-919f-85fc889dc0aa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e655c260-2b98-4039-a3f2-83912a28cb44", "sighting_of_ref": "indicator--807e6e7f-c87c-43a2-8db3-61831920cfe6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad2f804-637d-4c16-8ffa-3d4355961dac", "sighting_of_ref": "indicator--4f736ef6-4ee9-4e03-9429-ba80dbe19a43", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff7666d-36e6-40aa-8af6-6c33fd154d4f", "sighting_of_ref": "indicator--02f9ac57-ec75-4fb7-b9b9-9b2db2c60505", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f376c7f2-aa44-4fe9-9ff2-f4f940791683", "sighting_of_ref": "indicator--6b4e01e5-8a1d-4383-b1b4-a028c9765a5b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20684545-0ae4-4c86-a393-217eba21d40c", "sighting_of_ref": "indicator--f34b8f2f-15f6-4221-8376-37ea6f9393e4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431a46fe-a23e-4cd1-bbb9-b1b268777645", "sighting_of_ref": "indicator--11730753-e01b-416e-a925-7d4472a23e88", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df0bf98-f606-4f89-b4b4-bbf7b6846125", "sighting_of_ref": "indicator--5d8d8c5d-c596-4b8a-85bc-2fedc8751f0d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fb26ac-6d08-43f1-96df-cefca1f3bf7c", "sighting_of_ref": "indicator--46d489de-fbcd-41af-8181-1cbfca44f2f2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e62a960-0fa0-4ce7-9cbb-fc06d51fe27a", "sighting_of_ref": "indicator--1a75555c-ed1b-41a9-a004-a2734fa7b46d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece4bef8-dfb8-4acf-ad80-f840fcb65b4f", "sighting_of_ref": "indicator--46ff63f1-af07-4097-a7f9-ba5e96216141", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f033946-4872-44fe-a81a-2622b871ce89", "sighting_of_ref": "indicator--6bc04d18-add0-4947-bce5-0979e396f847", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44d4b02-a733-4bc0-9d88-a43bbb012149", "sighting_of_ref": "indicator--9c6c6d32-a006-4897-ae2b-9e2f0e0dc92f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cf7fe0-39a0-4bac-a428-e029d06eb9f4", "sighting_of_ref": "indicator--34c23202-6c2a-4a77-a13d-2b7ac07864b5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f56ea0c-1498-4fe6-b470-dc4739a8ed5f", "sighting_of_ref": "indicator--d3e9bf06-95d2-4d95-b159-386e2e62e6e9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d1812c-d1ac-416d-9a92-0ca7026ce483", "sighting_of_ref": "indicator--18293378-8781-46c5-b895-1845b1cdf57f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c46909-e5b2-42d7-b362-042203a04785", "sighting_of_ref": "indicator--e415a36e-ab97-414a-b1d2-3ec760957732", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335348be-988b-4e8b-a6f0-256c258b0139", "sighting_of_ref": "indicator--a38d26c6-05dd-47fe-87f6-61d3bb2960d1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3062e012-d181-4649-a372-490998f8f47d", "sighting_of_ref": "indicator--ad1cbe36-98c4-4ca4-95f9-3dfe80666b75", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07a75b6-edfd-4850-b478-fd28c46b616d", "sighting_of_ref": "indicator--33e36065-e4e3-47bd-af9e-56fa7bbcd2c0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2acebab2-190e-4c31-be49-a6c906cbe235", "sighting_of_ref": "indicator--6bc5db33-eff9-44a6-9b4d-b0ce486447ad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b220d14-4dae-417e-a4ba-868e8fcf8961", "sighting_of_ref": "indicator--187a1002-70e9-42be-8523-355896283301", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8698901-8297-4ba0-9660-48df8be477ea", "sighting_of_ref": "indicator--cbcf06b1-c564-4b16-b979-fdd86bb093d1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9c5680-30d8-406b-b1a6-914ca768180b", "sighting_of_ref": "indicator--cbcf06b1-c564-4b16-b979-fdd86bb093d1", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03822fd0-edb6-42be-a68e-674891433caa", "sighting_of_ref": "indicator--cbcf06b1-c564-4b16-b979-fdd86bb093d1", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9d05d5-635d-4ae7-a508-4c29661077e2", "sighting_of_ref": "indicator--c808208c-ebd9-4a5a-8c20-d6ec272dd0a7", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4894282e-835b-4744-a1c7-15e8fa45eaa0", "sighting_of_ref": "indicator--6506d21b-cfda-4eae-b500-267b49871797", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c744d1-bf92-4a63-a665-36d2ec1f26bb", "sighting_of_ref": "indicator--5021036c-5123-4939-bd7a-0ba5edb6b1bb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9c143d-8421-43a6-b774-c804745dfe82", "sighting_of_ref": "indicator--db250957-a4b9-48d5-b2ab-f6c5cc8dc4d4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425a62a6-0ca5-4336-800b-37cb64cd3c7a", "sighting_of_ref": "indicator--a09c3244-7537-4086-ad8c-ff7e9eb36f78", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d03835f-eed6-4a0b-bdff-e010d500856d", "sighting_of_ref": "indicator--f6360724-1942-4f2a-81aa-2a9d35eaf8cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05458188-7a50-4a37-9733-baac1eaa9930", "sighting_of_ref": "indicator--d1cc102e-47d9-4b77-b1dd-ec8835c22153", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9462b5f-b7c6-47d6-a8d4-f9be9ebdc5c5", "sighting_of_ref": "indicator--4db0f13c-7e15-4546-983a-7b4f26105c33", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28db5a70-3390-4dfc-a289-06f7ed5edee5", "sighting_of_ref": "indicator--00c99610-0d33-4502-80fc-7ab91f39858d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5928027-19eb-4d47-9f04-c242ac62119d", "sighting_of_ref": "indicator--6cb2f3f6-f88b-4654-9fbf-222d3cdef25f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8288a5c9-9387-498f-a3ae-6cb3eb867faf", "sighting_of_ref": "indicator--7c89894e-38b5-4158-8ac3-f98b6de748c4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10dcaa5c-2abc-4c33-bf24-fea12014b49f", "sighting_of_ref": "indicator--81cba770-74f9-438e-99f0-1e52a689a5bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf6cfcf-78dd-44b8-b728-92c0f7274410", "sighting_of_ref": "indicator--65c9585d-2c3e-4a74-8c94-6ba6c243646d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fe6a53-6c14-4f08-b584-afaf24f1e4fb", "sighting_of_ref": "indicator--982e76f2-d577-461d-92a5-89544b327450", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd44415-4d03-4c06-bb65-849ec9d40567", "sighting_of_ref": "indicator--910b419a-d6c4-410c-b491-b42e235efe47", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d945a39e-8a71-4ad7-86cb-db1e4d756cf3", "sighting_of_ref": "indicator--998a5b49-41e4-4539-9876-9675d36c9881", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1ca132-cf1c-4c08-9913-5081486f6443", "sighting_of_ref": "indicator--590420cd-5551-43f2-8cdd-e923f443edbf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46eebf6-df3d-46eb-85c0-91087e72ab39", "sighting_of_ref": "indicator--c10e1c76-817b-4834-b5e7-70c61de6d348", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac576ac-0ddf-474e-ac4e-6ee0740d9993", "sighting_of_ref": "indicator--a817f309-098a-415e-993f-2698ec5bf545", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc2facb-c8ed-4767-b842-b6880e30f5fb", "sighting_of_ref": "indicator--e02739d5-e1df-4ccd-9247-03ab799a4d35", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8e8367-588d-49a4-a4af-cf93b54f9585", "sighting_of_ref": "indicator--8dea268a-3957-4bf9-be0e-e0183367bda7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49a947d-b12f-4f2d-b879-ed1f1cbe5172", "sighting_of_ref": "indicator--c1e7dfcf-4624-49a2-98ba-0ed2d3bca939", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ef1c0b-c58f-48ff-a8a5-6696bc8ad467", "sighting_of_ref": "indicator--1ce25440-67fd-44b6-8f43-aaeae1a4d384", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e0c7f8-bd92-41e0-bc7b-76dbd6531e6c", "sighting_of_ref": "indicator--58472408-6599-4605-92a8-8692ba5adb0c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f6f58d-4d5b-466b-b38e-2ad590cc0fb2", "sighting_of_ref": "indicator--3d360edc-c851-40ed-9d7f-94f45cf5465f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc05e95-4ffa-41b7-82d4-649b5933e145", "sighting_of_ref": "indicator--0f86d95a-161b-4fc5-b1fa-12a17b7e76ed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bf1030-98b7-43f9-8ba9-d4c993f2d164", "sighting_of_ref": "indicator--9e28fe5c-61b7-40b4-9e7e-69e24709f9e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec56ee0e-5836-45e4-bfb3-1be116ae56ef", "sighting_of_ref": "indicator--536d6424-dcc9-4e7d-88a2-ecff7560f2bf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92707c0-6735-4cd3-8c72-e5d485e9027b", "sighting_of_ref": "indicator--2920378c-55b0-4f56-a68f-aaff83f85297", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8906e34-6cc0-4d1e-85f4-95cffa32880a", "sighting_of_ref": "indicator--8bc6af7b-e969-422e-a600-d35d4b622998", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e6e4b5-1e4b-4426-8ba0-fc67d4036a19", "sighting_of_ref": "indicator--0a9d7047-6c89-441b-a06c-26d8d7af23ba", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a21bbc0-837c-4b00-9606-c721ddc3415c", "sighting_of_ref": "indicator--89560598-9f02-4dab-b8d4-b13e0f614386", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ab108b-01fb-48ae-a1e4-6654a644d50c", "sighting_of_ref": "indicator--695709ea-ccb5-4f45-88b4-f855214dd863", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e101e69-d93c-4b81-9e32-771b6da649c7", "sighting_of_ref": "indicator--4b558046-566f-4a0e-afc9-5a34ec3ee5bc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76813dd6-d991-4af0-8561-1ef18590875a", "sighting_of_ref": "indicator--3cb8d311-5224-48a3-a6e6-311b32e53125", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71574f0-3b5a-4f3c-9f07-972cdeb37040", "sighting_of_ref": "indicator--d1ec75d1-a18a-4191-b200-39ebf3e40e15", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09adcb10-8173-4587-9354-8a5f472079a7", "sighting_of_ref": "indicator--20f1b719-09bc-4e7f-80cc-ce7794858bab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd2c00d-60d6-48b5-a1c2-68242c169e16", "sighting_of_ref": "indicator--865bb3a0-8017-48b6-8f9d-378ae1decdd1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81eb2e3-b605-46f7-92c0-1e397beba6fd", "sighting_of_ref": "indicator--120c926e-9da8-4187-bb21-2192e7426332", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10b8aa0-2294-4c30-bcb4-b2e393b3b927", "sighting_of_ref": "indicator--149da6f2-517b-45ad-9715-291553fb8271", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b0affc-ab66-4399-a585-488b1ef85528", "sighting_of_ref": "indicator--7e237a14-10de-4f50-bf6b-58fcf845b323", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af269d8-7def-4aab-8373-2836c08ba0b6", "sighting_of_ref": "indicator--ce96fb3d-2aa1-4863-bc99-be2a02f62964", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b55389b-6773-4515-aae7-68603fadd026", "sighting_of_ref": "indicator--7653a4ed-43e3-4ef1-ba1e-64a8cfe18d72", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae9a6bf-598c-4754-8f01-0d675045546f", "sighting_of_ref": "indicator--79b73682-557e-4d74-b3e7-14cacd42c4a7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26857172-8f18-49f8-baf0-954feda2a5ac", "sighting_of_ref": "indicator--b96d40b1-ab71-44b8-9459-c435de62fe53", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ca9471-c265-42b6-af03-74cfbfafada2", "sighting_of_ref": "indicator--7b09e696-ab06-4a16-97a9-1f3acabbdffc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbd62a8-f528-4860-af1e-f06aa8c8ff47", "sighting_of_ref": "indicator--33925b62-bc58-4851-9825-2b555b225bd8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc94f8bd-1ac0-41c5-a5a4-839083dbc7ef", "sighting_of_ref": "indicator--ba15f870-fcec-447f-8ac1-9c4e6ed4c8b8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b837fa-7cf1-4498-bc38-95b7d1462aa9", "sighting_of_ref": "indicator--95a278c7-0a48-402d-af78-88b78ae49ac8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b53ded-71f8-43ee-83b8-1e4e1488d957", "sighting_of_ref": "indicator--bc67e06a-e71c-4e6c-9f31-d3d8f0601f86", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526f1ee9-b30b-45b3-a4a7-0a39a31da536", "sighting_of_ref": "indicator--e1463186-1c03-4808-a545-cdc30b0564a0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae988bd-6a20-4d70-a5e0-a26fb09705e4", "sighting_of_ref": "indicator--e100d3be-7d85-46a8-a030-4f62ec8ce0f7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48da1a48-8ad1-41f8-b0b3-6ba6b9a86329", "sighting_of_ref": "indicator--a9d30c98-6cbd-4653-ac42-c9cf4777a2e2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c723fbdb-2bc7-4651-b32f-072106076093", "sighting_of_ref": "indicator--aa5ea8dc-a1a2-4ddb-8d10-9c93615cc035", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc14721-ef26-47e8-ab6b-175348f0882a", "sighting_of_ref": "indicator--a08f91e1-6681-4db2-9048-92da10a3621c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c8d4c9-e8d1-47d8-87ce-0955cc8c335c", "sighting_of_ref": "indicator--2627cfa8-9008-47a9-baa8-732e1ccde009", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08036315-4422-44c5-bf00-56e50c4e02f9", "sighting_of_ref": "indicator--27149f7f-f311-49d0-9663-78666470ade5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3193cf3b-389f-4db0-a314-9196c8f9d13a", "sighting_of_ref": "indicator--6cb5c39b-b725-4d95-8356-845891427b78", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651afcdc-cc1e-4bb1-984c-c3fab1dbeeec", "sighting_of_ref": "indicator--e9be3173-7835-46a1-9537-a31082dbc0e1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6cf803-1aef-4912-b1b2-5635c0addebe", "sighting_of_ref": "indicator--59969ba0-961b-4f85-ba55-34089b5e1bd8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6f5410-9f51-42b4-bcee-4b0be4c6a8d4", "sighting_of_ref": "indicator--2800220d-e74c-4735-93da-d8c998c9ca9c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0036d94d-958e-4e4a-a346-20776a27c49b", "sighting_of_ref": "indicator--f436121b-a98a-46b2-b411-b1530b74ed8b", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5715566-d7d9-48ee-b79f-56b902beefc5", "sighting_of_ref": "indicator--5ba6c0a7-3a98-4f97-87ac-6ac9c9760fa6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cddfbc54-69c3-400f-b99d-57e63891064e", "sighting_of_ref": "indicator--a1443eec-1655-40de-97b6-9f8feae5a14b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdaf4ed-60f3-4c8a-885e-788bd2c36429", "sighting_of_ref": "indicator--a1443eec-1655-40de-97b6-9f8feae5a14b", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ce7bbb-fd21-4996-b6c8-854a41652f32", "sighting_of_ref": "indicator--a0ca67f3-511a-4713-bd2c-07ef44d364ab", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7d949c-16bb-46a7-a59c-064493cc722c", "sighting_of_ref": "indicator--ae21dc2f-4666-457f-9bfd-690baf318bdb", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589f91a5-55ce-4091-a378-655d37d34b09", "sighting_of_ref": "indicator--55e8c4fe-fd50-4138-866a-501336df3a2c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5edc60-6929-4b35-bbc9-7d28d62b1032", "sighting_of_ref": "indicator--394f322d-8612-40aa-b4a4-c57bcadf10e7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a05410f-ab5a-43ea-8630-5a0de1079003", "sighting_of_ref": "indicator--394f322d-8612-40aa-b4a4-c57bcadf10e7", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bbbcbc-5ce2-4bab-aaa5-7974576b4a4c", "sighting_of_ref": "indicator--874781c4-2832-4ab1-a0c1-f88f2d58a3ce", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bd1511-7903-4587-b033-b674a002e592", "sighting_of_ref": "indicator--002b63e0-c118-4bc0-a36c-6c08aeb743a1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0538ae1-606b-4f66-b5c9-d7e127552acd", "sighting_of_ref": "indicator--77e2975b-cd8c-40b8-a8ed-767759f21751", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fad705b-01fb-4d6e-8a0e-f5ea5b82a5c8", "sighting_of_ref": "indicator--5a2e29ce-1dea-400f-a739-ab6e10ee2a6a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0c8db4-d780-4626-bdde-d831d0fb3812", "sighting_of_ref": "indicator--c0c6c761-0c66-4154-b692-a585f03aa3a8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49702c78-4c85-45c2-8c4c-b4452c09fe7e", "sighting_of_ref": "indicator--353f6205-77c2-4af9-bec8-bdf4f5f48483", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e5106a-e7fa-4242-9dd1-e4d9a040c09a", "sighting_of_ref": "indicator--16df6e65-52ec-4907-b5c3-6d349f3b07cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676ba8e5-9a18-45a8-9b31-0dfe2026e91f", "sighting_of_ref": "indicator--8766878c-65f6-49f3-9baf-8b85d4caff1c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be36c46d-f0de-4450-b14d-500549fde0eb", "sighting_of_ref": "indicator--c28aff12-06f0-40d7-8159-98fca8d18f24", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d56d2b2-8caf-4342-a5a4-6c2c9a68e99d", "sighting_of_ref": "indicator--c6aff433-f535-4280-8772-0921c2347231", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67366ed8-f9ed-42d7-b643-86ff0b404652", "sighting_of_ref": "indicator--ce53d2cb-4682-45c1-9729-f202e83ee40c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561a6ec4-3094-45d6-9f07-6d15d2059312", "sighting_of_ref": "indicator--820d578e-9a25-44bb-a6fc-67a747d6e53c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02e28b0-f536-4270-9bf9-a5ec54798aca", "sighting_of_ref": "indicator--93cfea96-c383-4cb9-81db-3fde025de5a8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad667419-5908-4ff8-842b-65b7fc435331", "sighting_of_ref": "indicator--b7e5fb25-4a1a-415e-b3cc-b8d436304400", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5e9a58-195d-40f9-9c87-b056a7db9e85", "sighting_of_ref": "indicator--09c4f72d-1ff3-43eb-8a77-d1dd54e5f464", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186c71f7-fd9a-4a16-98fb-30daa16bc5df", "sighting_of_ref": "indicator--8f586e01-4758-4655-850e-1c10cd64d0ce", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4f3e6b-3d36-475c-95de-ebf182647327", "sighting_of_ref": "indicator--49d63f46-7f2b-4f42-9c8e-54163ddd112e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9deac2-5b53-4d71-9464-c021960848e5", "sighting_of_ref": "indicator--1591fa1d-e890-4890-ae0f-9e4fc3b8db2e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f62f4e-a1a2-40ec-a3d4-4bee16090c75", "sighting_of_ref": "indicator--2f989b83-0bca-459d-bd81-9d457764b4a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567e307d-77b1-4d38-92be-2d9dff890765", "sighting_of_ref": "indicator--10ad6eac-7e0c-4b7f-a749-fbec048a1fe5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab3cfe1-6380-4ccc-ad01-da5e12310eb6", "sighting_of_ref": "indicator--99ce8319-f900-4ff5-be43-168377ce0668", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c029e0d0-e5df-4350-b2a6-dac914cb4160", "sighting_of_ref": "indicator--6d9f040d-ecf7-471f-bb8c-2b4992f2c672", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29793bc1-0fb7-4a86-b034-b352d2bf9e1a", "sighting_of_ref": "indicator--e2dbe157-5ce8-4eb9-b5a6-3af23d0d6795", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcfb0d2-b14d-4826-acc2-56d38d2afb80", "sighting_of_ref": "indicator--ed120fcf-a2f6-471c-b5cc-a0a2565fa479", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3f218e-2a32-4610-a98e-6f8f1e1f59ef", "sighting_of_ref": "indicator--9f64d632-6c34-4de9-bb91-574163e6c25e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4fa3d7-9fc0-46ce-b8cd-88481392f09a", "sighting_of_ref": "indicator--850b723c-9aef-4308-bee0-5415cf57c64b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cc792c-6fff-49b0-99f9-b2831c10f83a", "sighting_of_ref": "indicator--0ea8283c-10fd-4527-bfa0-1d58b048dd56", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330369f4-3701-45f3-ab3b-be880cbd0fa0", "sighting_of_ref": "indicator--18e45850-cb9c-4aec-af94-c236da1cb660", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c325bd7e-3518-4272-8ca1-f5b1e38f174e", "sighting_of_ref": "indicator--617f37cc-6ef7-44d9-9016-2d9ef69a4cec", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb05dedd-32a2-4228-b46e-1c5e1c51cd54", "sighting_of_ref": "indicator--6d2752f3-2b3b-40b5-9d89-f79e0a66928c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1984e4a9-bebe-469c-b34c-23cb1f5efdd5", "sighting_of_ref": "indicator--b8ed4d12-613f-416f-b3e5-9df6864b09f8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0176eeba-d2e9-40d5-ac0a-27e591ee86e9", "sighting_of_ref": "indicator--b636924c-ef70-4be6-9475-ffe557ebecc5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--402e6657-45e8-4ee4-80d3-362b12a0bd98", "sighting_of_ref": "indicator--5477b36e-1154-459f-8427-277dc8dc917d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e522f9e-6d2e-4841-9b5a-3ca469d6b793", "sighting_of_ref": "indicator--9843495c-08e0-46f5-94f7-55be85b552fe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ef2589-89be-414c-b975-26bcf6a56b6e", "sighting_of_ref": "indicator--597e1886-7aea-41d8-821f-7ae645eb13ef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990d762b-086b-4f3a-90ff-3c9f96e382e6", "sighting_of_ref": "indicator--68f0cfa3-8d67-47e4-89f3-ffb156d4a071", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fedf1c-7421-453d-aa6f-30ec3180f1f0", "sighting_of_ref": "indicator--9d4f5f43-8db9-45d5-b54f-d42f060b3deb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc606b67-d6e7-43c7-b0d2-41b3b9e3bc66", "sighting_of_ref": "indicator--6f928e48-22b7-4463-b26f-57d70ec4fa9d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283fd54b-aa1f-43bc-9fb6-ee27d25a651a", "sighting_of_ref": "indicator--fbe75aa5-1cf3-4610-8607-cc3de3f2f308", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdde6d16-80fe-4cda-863d-60c112a59642", "sighting_of_ref": "indicator--b1dbdc45-448a-4f38-b596-1c48396db14d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69a33bf-7dfc-49f3-9ddb-fecd249de0a8", "sighting_of_ref": "indicator--6e81c04f-45ad-451a-b3f2-bb0b5c767231", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063bf963-372b-414c-a7a8-20cdbd855c7b", "sighting_of_ref": "indicator--e2fd4c7c-0002-4a9e-a68c-4960d91fd607", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a80021e-9066-45f7-a65f-7273e773d6fc", "sighting_of_ref": "indicator--532687e0-5088-4580-b165-2fae39b47b58", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ef1cd8-7480-493c-9830-d641b7d8d167", "sighting_of_ref": "indicator--91ff141e-e699-4cce-8d8c-49a3f701c72e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46a25d1-d871-40e5-9968-99b5f047f8ed", "sighting_of_ref": "indicator--039d8c3c-fed0-4695-95fa-96e4d6cefeaf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de02340c-a41c-442f-bab3-e5162b8486be", "sighting_of_ref": "indicator--b3996741-7e37-4478-9612-352b52942b6b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b28ab58-915e-4e3a-9831-660444080f0b", "sighting_of_ref": "indicator--034fa212-6282-4157-b402-8a49bc8eb2dd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8a82ab-43ab-4a09-a9c6-3983ba20002b", "sighting_of_ref": "indicator--c94378b4-d402-4663-a3ae-2fd72f9bc867", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b13d2a-20f9-48fd-853d-f00b6ff99bcc", "sighting_of_ref": "indicator--0893e571-c09f-4619-ba9e-c44dd59f7307", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dba250e-88ce-4ba5-8e86-92a24785b802", "sighting_of_ref": "indicator--589e610b-b126-4661-a01b-34cc13246104", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52d037a-cabe-4fff-a3ee-60b9505ca0c6", "sighting_of_ref": "indicator--10b6a359-5648-4c6d-a030-b556051c86d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc7891a-8d8a-4137-86ce-1a95bb50aae9", "sighting_of_ref": "indicator--e3598210-2182-4539-9c4f-79b918dc5261", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6e85df-9934-4799-aee5-a94afbfa4234", "sighting_of_ref": "indicator--c340a10f-41d9-4633-aedc-f0f09118a4e4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f342c0b-5bee-4a41-9562-1c6ed05960fa", "sighting_of_ref": "indicator--82451e22-d33b-45ea-8ff5-e3bbf79591fb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7655ea90-8ece-4fa2-9ba7-5cd93556cd6e", "sighting_of_ref": "indicator--4d1f82bc-960b-4314-b2eb-7a03d8827520", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a36e889-3474-4ffc-8f5c-3a0dce1a25ee", "sighting_of_ref": "indicator--0e557dbc-0e6e-4dfc-bde4-ea448c840b9e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527f89f0-6b74-4cbc-b496-a4efd3401155", "sighting_of_ref": "indicator--82af65a5-36e1-498b-8908-35a28a8113ff", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72887fbb-7efb-413b-be9b-eaba687d7063", "sighting_of_ref": "indicator--8e12a22f-3439-4c80-a5a3-eee989b163d8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22693dda-8685-4ba9-80bd-e040830c8f53", "sighting_of_ref": "indicator--6b41a4da-3a29-41e6-b484-7ca949b4965b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2986d828-ead3-4051-a830-97f0d6350eef", "sighting_of_ref": "indicator--3f7c2d05-0917-4a48-b83d-d38a3eb39e17", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186da558-66fb-4696-8768-f00d51380366", "sighting_of_ref": "indicator--e0a5512a-f904-4f53-8bf2-b7b75b57a5ed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e864a3ff-2ae1-4257-a2ff-41f35d658a95", "sighting_of_ref": "indicator--6898b6ff-f31c-402a-9bfe-d9f80d32fd63", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0ab17e-2ea5-46fb-ba42-7ec3a2d68673", "sighting_of_ref": "indicator--822da146-91e7-4ad3-b8d7-7072977d29a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8460c8f7-4465-4e02-972b-4cff4a2bea96", "sighting_of_ref": "indicator--6e9cb399-6ee0-4834-b943-a55d072eaa11", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b690d285-1039-449c-bd79-54427544d66a", "sighting_of_ref": "indicator--2ba00df5-5c17-4c87-9d8c-86a1694337e2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7cdd0f-dc07-47c0-9a8f-bceb6e27c1a8", "sighting_of_ref": "indicator--0fabe905-58bc-4d10-a396-a232b7296ab8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae160c1-2c73-464c-bebe-fc44e7c72896", "sighting_of_ref": "indicator--9d79d0b8-c50f-4043-af28-b50839a296f0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e2f9bc-615d-4d87-8431-3a9fa9e29e04", "sighting_of_ref": "indicator--0922fc07-1f12-4735-861c-31a77cc3334d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa3ed0a-7802-4c34-b0ab-dff04cabfd31", "sighting_of_ref": "indicator--f4b4a04a-48a1-451b-a5be-931f4352482f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23485e2e-ad43-42c8-af5f-a44c3acac5d9", "sighting_of_ref": "indicator--bd0bf18f-d812-46cc-b564-f09e5a9e5c8c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf32cd2-784e-4bb3-93d5-4c68727cc07e", "sighting_of_ref": "indicator--f9d5c77b-272a-4279-951b-f0f2bda23f2b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4145b23b-2cbd-4325-8873-86866c539f42", "sighting_of_ref": "indicator--b79011fd-5b4c-4c2f-805a-aa84d1c4f4da", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1512f26-3f62-4aaf-8863-19f08a847dc1", "sighting_of_ref": "indicator--2efeabfd-8508-43af-a01f-659c9613eb02", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd968f7-6d50-4a70-b581-3213dd41e4c4", "sighting_of_ref": "indicator--c01a22cd-4561-4ad5-afa4-596ad935ec37", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9054924-d59a-47d1-96f7-e69a35a2fbf4", "sighting_of_ref": "indicator--f1d80a7f-bb66-4d07-b176-3e36be0b0152", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640fe901-45dc-4546-a806-d56dc0542183", "sighting_of_ref": "indicator--2877ad16-3740-4749-a30f-4099700cd248", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8806c5-b9d7-4d6f-aff3-72c2646892bd", "sighting_of_ref": "indicator--db4fd13e-0aaa-48f8-95a2-fee6f6c141bf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecb486a-20d6-4d01-a8e4-c6a31682b8d1", "sighting_of_ref": "indicator--23e3314f-b76b-4319-87d0-de5a17542807", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c3f1fa-bd85-4e43-ad31-89da337881e4", "sighting_of_ref": "indicator--8ad13a88-fdcf-480b-a2ff-806a11896099", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bdf7114-32e0-4aa0-b0fc-d7791a3bcb5e", "sighting_of_ref": "indicator--73ef7636-e719-4015-9c52-8f6b464ad4e9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f086094d-9d95-4cfb-882b-f65b0a331378", "sighting_of_ref": "indicator--26e4646e-0041-4b40-823d-dc8fcd91f93c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9929e7ba-674e-47f0-bd81-e24099b413d5", "sighting_of_ref": "indicator--6fd42b9c-805c-489a-a6f1-555fa2102981", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f74b9b9-5d3e-4553-9ba8-203c853c623c", "sighting_of_ref": "indicator--d14b1e0e-bcc0-4ad9-a51a-ca149b33edef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003ba682-aa67-4b6b-9ea6-7acba15157f3", "sighting_of_ref": "indicator--0e639dc1-4779-4500-b846-3386f38281bc", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1415f5eb-f8b2-4aac-be5e-62d59fb0d224", "sighting_of_ref": "indicator--90013099-f657-4976-89db-aea9b3d9f137", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3af6da8-a597-4a07-bdf8-65434e876457", "sighting_of_ref": "indicator--d01f9960-6eff-48a0-a882-112ba89f724c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fb7bc3-e0e1-42ab-885d-0e4ded4b9349", "sighting_of_ref": "indicator--c278b623-d75f-4d3e-a12b-cb1fdeb63a04", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cfa3097-7510-4707-8d9a-c8f3b6114c18", "sighting_of_ref": "indicator--52887164-dce4-423b-8342-030d7e288d49", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3eb1f2-7e4e-43d4-99f2-45e5ac1f5d2c", "sighting_of_ref": "indicator--28d7e0f9-021e-46f7-ac53-9ab6cff4b98c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc60af1-f310-403f-a069-8515f43db8ee", "sighting_of_ref": "indicator--ed431f92-1ecd-461d-9cc1-720c664f8602", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628405de-ae38-49ca-bc80-0a398fe9524d", "sighting_of_ref": "indicator--de100078-2487-4714-852d-019d88233556", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ecbd36-fe65-4a4d-afae-961c5a570c87", "sighting_of_ref": "indicator--ba39a5cb-d537-4c4c-ba35-2d4c70162e70", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db104226-1312-4d5a-8895-4b9b838d86d9", "sighting_of_ref": "indicator--0be09a7f-138e-4202-9dd9-4c956d6ea1bd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76a9dc2-3b5f-44f2-9c12-93c64d16635c", "sighting_of_ref": "indicator--dd05f54d-4935-44bf-b7f4-3700ebb4aab7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6c042d-72fe-43ba-af8b-5479dc8c8d1f", "sighting_of_ref": "indicator--673e01fa-88e1-4939-82be-13f9714e0954", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5aacbfc-6f1d-49a0-9389-f1cb50e0f092", "sighting_of_ref": "indicator--2746f596-749d-42de-b8f0-cacd3f21461e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3245d5f1-e6e4-4ecf-bc7d-450a63c20c62", "sighting_of_ref": "indicator--5833da57-e81c-474c-afd5-c492b922c8ac", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc64751-2d1b-41bd-836f-a935c6a9262d", "sighting_of_ref": "indicator--24ae476f-ca68-4cf4-b36f-c547dde0ec99", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e06899b-998e-48b8-9242-639bddc3db89", "sighting_of_ref": "indicator--26babb1c-7244-46e4-9d29-3ff91f0213f8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fca784f-3f42-48e3-8525-6034470876fa", "sighting_of_ref": "indicator--79114f79-92a1-489f-9327-b8860d1b61df", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca64748c-4d0a-4011-9af3-3dc94a1d1bcc", "sighting_of_ref": "indicator--7dec0e4c-3594-4925-b93e-d765b072032c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345bfb6f-c625-451b-95ae-19d685625601", "sighting_of_ref": "indicator--88942019-dd8e-4ec6-8b4c-113da8252fef", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cbdc9c-08d7-41e5-a61a-bfc4de61c1a7", "sighting_of_ref": "indicator--46d5c626-bffb-49bd-94a8-618a210c69f3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e794a7-9a6b-417c-bcbb-507c87e584af", "sighting_of_ref": "indicator--a4cbdf9f-1b02-401d-bdd6-19a46a8fe80e", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83617a3-e579-4e91-8614-9b023c4d848f", "sighting_of_ref": "indicator--4f7ce120-8378-4f23-8482-d0fb7a98e099", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f146687-a7fa-41c3-b184-809c5c57ac7e", "sighting_of_ref": "indicator--fcbea219-b4f6-49c5-bfd0-a32488bb6f86", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d8ee76-02a0-4ece-a4b7-6aee9103cb7d", "sighting_of_ref": "indicator--d805ca8f-4c2f-4504-b389-58ad1bc29a4c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d6a23e-cbc3-4ca0-9d64-cecdb2f36dbe", "sighting_of_ref": "indicator--33990abb-633b-420f-a43a-f703d37e765c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4f7147-8eb5-4b20-a58f-96771f83fd43", "sighting_of_ref": "indicator--c57be2f1-c184-4cea-810f-fbd10c921480", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b3d4c4-1833-4ff7-a489-030338d5b192", "sighting_of_ref": "indicator--e99936e8-c320-4680-a2ce-df0c6ebaff2f", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3097ff56-5a3d-4e5b-a3e1-187f5370cf0f", "sighting_of_ref": "indicator--f7a3d179-c5aa-4c21-8470-43bc435ea4be", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e11887-e0b8-43a4-8906-b317633d4501", "sighting_of_ref": "indicator--997b6357-eeb7-4492-982b-50f85df325ea", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec977e5f-8279-4459-80ac-7c7dcae5bcb8", "sighting_of_ref": "indicator--68c0b113-7259-4d67-8a71-4aedc4df423f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97743287-2ac7-4d47-8165-38a231bb00fb", "sighting_of_ref": "indicator--88f52f75-1698-4204-957c-3f686afe5eb2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0fad1b-0b40-4edf-97bc-e3d54e3619a2", "sighting_of_ref": "indicator--6f7fb7d3-8ea9-4b48-8716-f781cf4f4726", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6efbf325-bf60-4d81-b670-cade52aa100f", "sighting_of_ref": "indicator--8e313ce9-6af2-4cb6-8223-0dc39367e8b9", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a180355-15bd-4ccc-b946-3eeace167951", "sighting_of_ref": "indicator--1c6114d0-d0da-4d43-8649-03455a58b3ec", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33a5fc0-3196-4a33-b759-806924dd4597", "sighting_of_ref": "indicator--6cd1881b-b525-482c-b6c0-0806f4ee9d00", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc828b2-1837-409e-8b5c-8092695cf932", "sighting_of_ref": "indicator--d9c92517-e29a-45b5-a95a-216e052ccb88", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ed1630-63a6-49a3-91d4-4a70f10c69b8", "sighting_of_ref": "indicator--a023b71e-99c0-4572-8aa6-72251c1ed9cb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8191843d-847f-4b11-9a64-85f5af8b6449", "sighting_of_ref": "indicator--b94bee7f-1ba4-42bf-9af8-ba762c42eb46", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8743fb-b2fc-4161-8454-e3e6e97750f8", "sighting_of_ref": "indicator--fcd80234-9693-4d04-a873-ca2bf1e5aa3f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3628aa-7edd-4158-8979-735172be984a", "sighting_of_ref": "indicator--89284ea2-aeb5-4c54-8955-623a89ed06dc", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185a1e10-cf6f-42d5-8f95-97e63df62d77", "sighting_of_ref": "indicator--17b1791f-0075-45c6-8cfa-6318ebea7ab7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16616f6-1fd5-44dc-ac78-9ce97298ba82", "sighting_of_ref": "indicator--888a848f-f06c-4427-bf33-49206180bc22", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67ad014-d7f2-44b4-9017-976a719795ae", "sighting_of_ref": "indicator--782adeae-d5ee-478a-94f7-308e97b0d0b0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98b1944-065f-421f-a173-ab527a3bc425", "sighting_of_ref": "indicator--f884115d-895b-4044-8876-34b1d0179cd4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcafe60b-df98-4a51-b211-3cc8cc3af381", "sighting_of_ref": "indicator--08b0019d-86be-423c-b9ed-2ad14d9f4ef7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52add88c-bc95-40d8-936e-063d1255c3ab", "sighting_of_ref": "indicator--f9617699-923a-4545-b843-dc5578dffcee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de247763-a6cc-46b9-94ed-3a471a0e2aed", "sighting_of_ref": "indicator--949c87da-35d4-446c-b321-a77a4fdb9604", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c872a17c-aaf5-40b2-848a-9abda587ab1f", "sighting_of_ref": "indicator--23b087e3-b26e-4cd3-8ce5-bd9449be350a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01fb9c5-82da-4524-97f4-408ff4945603", "sighting_of_ref": "indicator--d78b7f3c-ae05-440e-becd-d7d2394a2e3b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64f8aea-f96a-4f12-a3e2-f180152f295e", "sighting_of_ref": "indicator--5bc96439-4dfd-498b-b8ff-9e9699b568bd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec13b2a3-3b10-4218-9990-da6216e918a3", "sighting_of_ref": "indicator--e7d35f61-7186-4c0e-81d9-a75ea3cf2aef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976b7c5a-d37e-4b04-9e8b-b0f440506585", "sighting_of_ref": "indicator--40c15fa0-316a-443f-bcce-431faa76fadc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5253fe-bebe-49b5-8a47-b8a8512903b6", "sighting_of_ref": "indicator--96defb85-80f9-420f-a280-054420ba66fe", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6cd41f-02d9-4f36-a7ef-d3cbde61e8a7", "sighting_of_ref": "indicator--5ce7efdd-1f37-4c4e-92a7-b0812cfe88fe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26184ce1-587b-4a61-9e27-e4a801b59e66", "sighting_of_ref": "indicator--933c6ae3-de52-477b-b750-9ae048faa401", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573cbd5a-fb99-45cd-8f55-ee460cac0738", "sighting_of_ref": "indicator--92d7e73f-b514-4c73-a840-1d831879ca9d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d46b1c-2847-4557-93f9-806dd363306f", "sighting_of_ref": "indicator--572aacd7-e2dd-4291-a9f8-b8de16d34f10", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7def7f-56ec-4001-a180-86bd29e072e6", "sighting_of_ref": "indicator--e1be8657-2995-4fae-bb2b-47a45f3f9229", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa7cb68-71fa-472a-8428-5b1cc289639f", "sighting_of_ref": "indicator--47f4d135-5b82-4613-9fb2-7fd20b4838f1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c863d248-c4c5-4205-a9b5-c7629ea95832", "sighting_of_ref": "indicator--6e3ca0da-6835-4862-af40-820c7ba6c01e", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232b6666-bf07-41a9-ac99-630a9b8cfc31", "sighting_of_ref": "indicator--9b9f98f9-3b02-41fe-b432-898cbf74d300", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caeb7756-3378-4b2a-8f7d-580ac3b72280", "sighting_of_ref": "indicator--ecad2272-ad84-40d1-9a8d-c40e4f6a6e98", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3a90ab-4041-46ec-b59c-41be38830e4e", "sighting_of_ref": "indicator--cb84e97d-c210-4db2-aad8-4f90471f96c3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d538c7-98b6-4717-acc7-2e5c1feede62", "sighting_of_ref": "indicator--05b08c1c-01a5-4507-8a2e-7cf4ab2cf887", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b96f9d-b72d-49dd-bdc0-cc38a6ad91aa", "sighting_of_ref": "indicator--9780cc33-9e9f-4038-8996-bcf33d390177", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07e0763-26fb-4e1a-9ddb-ea8523af5a83", "sighting_of_ref": "indicator--7e0c6b16-0807-4ecf-87f6-3ec4d26986a8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a878d3-ac88-4977-bf89-850d10e770d1", "sighting_of_ref": "indicator--b787761e-6ab7-44cc-afa0-84c70bc67bed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92819eee-3527-477f-95a2-225187f951e2", "sighting_of_ref": "indicator--3c9d9e00-bb8a-40dd-bd36-7d80466736ff", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2024315-900f-4376-a719-40209ac2549d", "sighting_of_ref": "indicator--82c2f8ae-593e-42a6-a243-6669f20472cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150f6a83-7b95-4bdf-ba4a-64f17f703649", "sighting_of_ref": "indicator--28b3732a-0e09-4a95-a6db-b1f3017c1de3", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbdbdc3-c016-4aa5-9dd8-962b09b516b9", "sighting_of_ref": "indicator--525d0060-1113-43cd-950a-3634d1786b89", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e2e8e8-22d1-48a9-8008-d97befef19fd", "sighting_of_ref": "indicator--45c199b3-5a48-416e-a60b-0282d96741fc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb348c9-f734-43d6-9743-9f7d7d5b6b20", "sighting_of_ref": "indicator--45c199b3-5a48-416e-a60b-0282d96741fc", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8e5766-5ff9-4e7e-a836-e238a5b7b104", "sighting_of_ref": "indicator--a3ad2c63-e80e-4e55-8dc9-30b2ee9f33e0", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce87d7e9-07c6-460d-a2cf-8f604469ed02", "sighting_of_ref": "indicator--2265306b-3dd2-4302-b1e0-5febf6280c5c", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242e8b19-3d36-4235-bae9-28465e276a64", "sighting_of_ref": "indicator--e8e0be66-02a6-4a02-80d3-0825dae2db01", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468d73e8-172b-4144-8939-ee7017696bae", "sighting_of_ref": "indicator--4fa3cafc-3343-4008-b5c9-aaa0d98d7566", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d8c3f1-9f70-49e0-b26f-f6c603000b8a", "sighting_of_ref": "indicator--27e3d9d1-8f20-4d8d-b82a-5a3943ef957d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1423475c-cab7-4c33-a43f-a420cfad53e7", "sighting_of_ref": "indicator--c147a269-98c5-486d-a2fa-be3c0c483afe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420ef9c5-1964-4116-ac0b-6bb4e05e2d37", "sighting_of_ref": "indicator--9b8d09d9-626c-43aa-818f-74a68648e1f6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae089b5-20f5-43bd-aae9-7f6d1d2db9f9", "sighting_of_ref": "indicator--12e37dc4-5d07-47b9-823c-055e4c69fd19", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07cb6c0-fe23-4cb2-9801-d7a1af448876", "sighting_of_ref": "indicator--694ed037-c6f4-43cd-8a25-99b966052194", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83dd36de-4a67-4b78-97b8-8807784e5152", "sighting_of_ref": "indicator--fdec0ccf-247d-4f36-aa6c-5a7154ac0b19", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647bdbee-7642-4d6b-a707-c06344f6fef1", "sighting_of_ref": "indicator--ce711168-3381-4397-99b7-afea79f58eef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8df90a-b76a-4c6b-b174-845517a6a2b9", "sighting_of_ref": "indicator--f43f9f39-a50f-4115-88ad-1558cd0e51a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d5727f-31d1-4769-a4b3-88af9f66b9d4", "sighting_of_ref": "indicator--5c875eb1-2e5c-4a7b-afcf-d47d4040c8cd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a6ab04-5474-434e-9967-b451f4603bde", "sighting_of_ref": "indicator--d5e9acf6-3918-4fe5-ab68-36b272adf7a9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f2e8cf-790a-429f-9a73-ea94b9c7d3a0", "sighting_of_ref": "indicator--88d867a2-8cfc-4db7-a63b-75f8bd1a2931", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9a996d-857d-47fa-92f6-8d5af6c99730", "sighting_of_ref": "indicator--0c081a5a-9629-489f-ad47-1207f6ec3312", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dc625d-ff3e-4d31-a044-c593cfd899c2", "sighting_of_ref": "indicator--82d3d707-b7b9-4b0b-b405-2a044861fbdc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500e132b-e605-4eb3-97d3-6807a8975aef", "sighting_of_ref": "indicator--5be3fd89-82cd-44a9-9d4e-9669861d70ca", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ae0ac4-5673-4929-9756-47d2b55d3cec", "sighting_of_ref": "indicator--def9a0df-b67a-4f1e-9be7-ec7da4d18b3c", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c5d6e5-b46b-4cee-87a0-be08fe23bb19", "sighting_of_ref": "indicator--f1970cde-d808-4b37-9766-3dda61aa4ccc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf86764f-c085-46e2-a052-7d0ac67b3e09", "sighting_of_ref": "indicator--267659e8-43db-45ab-85b4-9d5cdaa26b4b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6accf6aa-0dd2-44f3-bb28-cf103aa9e099", "sighting_of_ref": "indicator--2c21e40b-891b-4f5d-9f7b-b77392a16650", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b1fed8-029a-4256-9660-5092fe72e95b", "sighting_of_ref": "indicator--2992edff-09a4-490c-b0e2-f8e7ae2ea6c5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee9f262-6ee3-4c1c-a521-ba76499c6840", "sighting_of_ref": "indicator--713eb733-aeca-427f-b650-d21e436d46ba", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57ae37b-a1c4-417a-82de-990aeaadac6b", "sighting_of_ref": "indicator--c3aef3c7-d840-4983-8c2d-43a9935ca1b3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22852ae-6822-4933-b0cd-b6a4bf35bda1", "sighting_of_ref": "indicator--369cf12a-fbb8-4c1c-a7d6-29e683a658af", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939fb110-4556-4b1d-856a-597c37308ff2", "sighting_of_ref": "indicator--e91e873e-b413-4501-974e-28f15c2e053b", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7d938d-0c4b-47de-bb40-44080ebbe8eb", "sighting_of_ref": "indicator--62c3c9a1-2ba4-4f50-a45f-4a7f930936ff", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe69d1f9-c98b-4b13-9ac1-47305df55e6e", "sighting_of_ref": "indicator--0d070797-73fa-4954-b988-c0b094e8560f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3755bf9c-f2e7-40da-8dab-aafbf28530bf", "sighting_of_ref": "indicator--c063f67c-90cd-4f41-8886-1ecf7e82400d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643201ec-b77b-429a-b697-4a9c2b1930eb", "sighting_of_ref": "indicator--fb8f1080-f78e-4b8c-a9eb-066b93e45785", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1b79c5-c7fa-4aae-9fae-7241749bd9b2", "sighting_of_ref": "indicator--7da0fa82-80f3-4e88-b668-b366d7648d7c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bdd84c-71b7-47cc-984b-3455c7596963", "sighting_of_ref": "indicator--14b7e685-af9f-4424-bcda-06669bcf4ac7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4fc4ee-6a16-40f8-af79-5cb2b2d4d43c", "sighting_of_ref": "indicator--cecac57a-1104-407a-8462-3981236aca36", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59409b8c-464a-4298-8eb4-71cc10a81d88", "sighting_of_ref": "indicator--cecac57a-1104-407a-8462-3981236aca36", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1901790d-6867-484f-aa98-88dc224a34e3", "sighting_of_ref": "indicator--8b0c372e-4075-44a2-b202-d7561acf12a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed226ce-43af-4309-aeb5-8d3edae57fcf", "sighting_of_ref": "indicator--841f7168-7c92-4d3f-930b-caab3aeb7313", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d21061-4d3d-484c-b1c1-2c77a7579412", "sighting_of_ref": "indicator--f86b1160-2610-4ccb-833b-8980e995cc1f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0044692-98dd-4a24-adf8-82dacfd56ed3", "sighting_of_ref": "indicator--1b5670b6-993a-42a8-91f7-87bd2e035750", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd84881-ec7d-47f7-92ca-0137b6300627", "sighting_of_ref": "indicator--15cef708-86f6-4082-80eb-9b852eae0ecf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cd2ed4-8730-4a34-a864-566ab10328f0", "sighting_of_ref": "indicator--709887d6-0e18-45c7-ba22-3f88da2fc54c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ce3228-6236-432f-a4bc-4fee33475a31", "sighting_of_ref": "indicator--a2a1ad80-62d4-495e-818a-26620efdfa68", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60fa57e-4fdd-4295-ac15-82ac638eb97e", "sighting_of_ref": "indicator--57d6bcef-b6fd-458f-95c0-8e142a225910", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a258f39-3b59-4c8e-a738-34195f1690ba", "sighting_of_ref": "indicator--c31be1fb-a7f7-4f2f-9e96-5665deeb5168", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933b3793-8c08-4d14-a777-ebef3774fd1c", "sighting_of_ref": "indicator--da0cfc1b-1bd6-4548-a104-d708aa82e9aa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d0fcf9-50ea-4ef1-ba22-efc7b6badae8", "sighting_of_ref": "indicator--4776fced-6a60-445e-a058-726fc7c5e8b7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee41ab6-cc5f-4aa0-9bbf-17e43859f0e8", "sighting_of_ref": "indicator--2ab028bc-757e-4c31-8b1d-3de6dec43ac2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16152b34-7918-440e-ad8b-2aa82b474c89", "sighting_of_ref": "indicator--b7968fdd-8d54-416b-a9ea-91e77d5370d4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97703297-32e9-42d7-877f-9d88976301e9", "sighting_of_ref": "indicator--f3fcb328-16c6-4165-98a9-a056849556a3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97cb3cb-97cd-4f77-ac60-37a11ff737c7", "sighting_of_ref": "indicator--7eb57a8a-6138-4a9f-9790-8b92b3a2263d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9018845-f8ab-45b3-a13e-29dc33227471", "sighting_of_ref": "indicator--8cff4dd3-10f0-48c6-a0af-fd052f4360eb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a05fe2-4ae7-4f58-b81e-b6b98fe02e5b", "sighting_of_ref": "indicator--7bd28ce4-3e9a-49ef-96d9-d77623d42bec", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a669fc3-f621-45ec-bb9a-e57d5577b898", "sighting_of_ref": "indicator--de27e633-3d59-4777-9bd6-036f6ff78d48", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c309cbc8-f8ab-4e1d-b0af-2fa3bc920065", "sighting_of_ref": "indicator--bcb72b72-9e88-475f-a00b-5b754bb75c5a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474044ac-0554-4e96-874d-f286a399a7fc", "sighting_of_ref": "indicator--25bd999a-2158-4bf8-9809-9f68d7e311ed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d687e611-8fd9-47b5-8f68-7c63b45631df", "sighting_of_ref": "indicator--dde56752-2b81-47a1-bbd0-580287e8a751", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187d7da8-b1c9-408e-ae88-48bfa38c9e7a", "sighting_of_ref": "indicator--18ccb6c9-4578-4808-9e7b-307c946b7be5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6dc43fa-f990-4505-ab42-2d52c832f151", "sighting_of_ref": "indicator--de751351-e14a-47ae-96c8-4c1e1c25b68a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98206091-d1ff-4430-a775-c9c1f712eb21", "sighting_of_ref": "indicator--32a87a20-da1f-4de2-ae86-62a1b5ff6c21", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfaaa10-3911-4ef0-a2ef-cbf74e6e2448", "sighting_of_ref": "indicator--dacb7d33-23be-4975-851a-9f913b4f680f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce906b9b-9849-4731-8f1b-6b1a97c3d86c", "sighting_of_ref": "indicator--8edbb086-e06d-4789-96df-5fc26a8605b1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfaa695e-d6f6-43a7-a328-5106d698a294", "sighting_of_ref": "indicator--4a1bee99-7f31-4546-b969-88c4d6deab74", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8ffd26-e893-4b9e-937c-caaac8068867", "sighting_of_ref": "indicator--bd324761-33f0-4252-80ee-baf6ca34226c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4181e0-ca1e-4331-8b16-34cd754da5f5", "sighting_of_ref": "indicator--5071414f-5f0e-4903-8979-0661ec68126b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07486a3-5c71-4550-8ebf-5eef704514f7", "sighting_of_ref": "indicator--3959a47f-2282-4082-be99-ca11e4cc52ec", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948cea1a-3d3b-4fcb-828d-6df1391fa84b", "sighting_of_ref": "indicator--167f6925-f7b5-4450-ad43-ef0ff4ba2620", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c7578c-e65c-4894-8033-22419ad8605c", "sighting_of_ref": "indicator--c4ab8cda-0553-4a46-8344-9a097362e103", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f9943c-a536-4b5f-aaf4-30ec27ef571a", "sighting_of_ref": "indicator--4b7fe710-46f0-4178-9ccd-0183cdb6fe95", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ab5c1b-bf75-4160-9418-b2c5678f5bcd", "sighting_of_ref": "indicator--33d95532-0172-4eec-9260-432d5b57b270", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd16e7c3-d7bf-4325-a023-e8ce6ed6b812", "sighting_of_ref": "indicator--79b69888-9ce1-4fa6-a712-7ace3f3029aa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e19c23-f31f-4d7a-b547-a0c6bc6b3a5d", "sighting_of_ref": "indicator--e8f59d0b-19a8-42a2-99a5-95268d958588", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c520288-0bcc-4ef5-b1cb-634627fc661e", "sighting_of_ref": "indicator--dc4cc780-9273-4a68-b360-fedc4a9a67d1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cdf511a-4f5a-4447-8e39-a0757bef18ae", "sighting_of_ref": "indicator--ef243b0b-4f05-41fa-b24b-84bb87ddeda8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb20f517-b2f1-41fc-9c47-b9da43f29677", "sighting_of_ref": "indicator--f54d5025-4b0f-4b41-9fb7-4fd9a8639d9f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214f25c1-7d75-42d2-80f9-52a4bf0f4459", "sighting_of_ref": "indicator--3544a981-443b-42f1-a12d-ffbb31ccc200", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb03ff44-cf3a-4644-b161-3360245c9eb9", "sighting_of_ref": "indicator--e0cd1a71-3fe2-46bc-be39-42abfc1534bc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb68edbd-e597-44fe-8d18-3c7c8dfd644d", "sighting_of_ref": "indicator--54df5ca4-26bc-4134-8612-78556787f156", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af38df86-a80e-4fca-900f-265c6be791ee", "sighting_of_ref": "indicator--f5360e8c-9f54-414b-b56b-41ac20260c23", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c74108d-a545-42d6-861c-eca98321e901", "sighting_of_ref": "indicator--3e5495c2-ea42-4904-80f8-ce6b6c3cd44b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094a675d-f3a8-4d29-9168-55b7a482e7ed", "sighting_of_ref": "indicator--8ff37a6f-9c67-42c2-a4c1-4767a65601ea", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f302068-d24c-4d2c-a74f-0951433b2dca", "sighting_of_ref": "indicator--80878c8a-ea4a-4fe9-9775-b114e68ef950", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f34030-2929-46e0-bc91-f33082e9c212", "sighting_of_ref": "indicator--d5e7eefd-7914-4aa1-846b-a84de6272295", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bcb993-6b16-42d7-bf79-d1103fff9829", "sighting_of_ref": "indicator--58fc45f1-7147-4bb5-8bb4-b3d1697c61f1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f366c9-4de1-4dec-9b57-622c507bdfc0", "sighting_of_ref": "indicator--38ffa367-e8d5-4eb8-ae86-baa8f0a0d5f0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e206af5f-462c-42d9-951c-0f0fa1e86d04", "sighting_of_ref": "indicator--e09a07d8-db6d-4298-bff8-b4e3a3cfa1c4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d3cbe6-b81a-4180-ada7-2ca5b9f7a08a", "sighting_of_ref": "indicator--935e81c5-d984-448a-a6a9-0d4624c3cdbb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76096539-2a4f-453c-84b5-888bfaecb6b9", "sighting_of_ref": "indicator--2aac8e97-8cd1-463d-8681-10e444c2341f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78a721a-bfc6-432f-bb47-a3eb75a096bb", "sighting_of_ref": "indicator--d3223a0c-748e-4443-b154-0e044e272b47", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4b6794-fba4-4b84-a72d-1411c6d75e6f", "sighting_of_ref": "indicator--31fe8d01-b946-45a4-8d1d-ba79dc3e9662", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17023a07-364f-4520-bf65-edb5caa406f0", "sighting_of_ref": "indicator--eceff8e3-637e-4054-89ca-a216b9e8c29e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0e388b-1141-49e1-bcc4-8387635901bf", "sighting_of_ref": "indicator--d26e957f-c423-413d-9ded-15f3cd498a9e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c0a44e-03b2-4dee-8ed6-573d4dc3a172", "sighting_of_ref": "indicator--777c2603-75ef-49d4-b8ba-44f8a49efd27", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edeac397-9c87-4551-8417-3f6b273bba91", "sighting_of_ref": "indicator--e86f3561-64df-496c-9eb8-c7befd2fd6f1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd66b437-e7bf-4f47-813f-48a5f136aa7b", "sighting_of_ref": "indicator--e86f3561-64df-496c-9eb8-c7befd2fd6f1", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54529513-faa2-4a94-ac45-aa8c1c87c452", "sighting_of_ref": "indicator--3c0ac81a-b42e-4863-af32-b3e4cf96a0c7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ff1e62-1050-4efa-8e05-d8814666c092", "sighting_of_ref": "indicator--b0aaa2e6-d1ce-4ed8-9f4e-73412624cbee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cdbd33-f9a4-4905-aa54-ea16142ff227", "sighting_of_ref": "indicator--02aec4cb-594d-4b06-ada9-1e72c45f2ae1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad18c1f3-122a-4f27-976a-422332156d7b", "sighting_of_ref": "indicator--23b1efb1-e237-4a9a-bdbc-9c9f18fc48ac", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7be467d-7a9d-435e-81b3-3c6c1d6b6140", "sighting_of_ref": "indicator--bc601ce2-2dba-4292-9ad8-3aa0ddee3d09", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8b0b5f-4dbf-472c-aa9d-d7c74c8dfd4a", "sighting_of_ref": "indicator--ba88e1bc-ca17-4da0-8402-214104a7f1b8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8e88bc-5f9e-48a8-9d56-32545462cf10", "sighting_of_ref": "indicator--8af32ca9-c93f-4230-9496-c7f23eeb78b2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b823937-83bd-4a81-99fb-521cbfe0b458", "sighting_of_ref": "indicator--42e74309-dfa0-45b3-a939-746ba135640d", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbda9f58-1702-43e7-9ba8-047f244dce21", "sighting_of_ref": "indicator--58e9c086-db76-4b0b-9e3d-c9cd5c34564c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44859162-e077-4c0b-b040-47ed9203efc5", "sighting_of_ref": "indicator--6dfb897d-c3c7-4e1e-9290-0a06882d9361", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5417a4-ae72-45d1-9c4b-208739cc2d00", "sighting_of_ref": "indicator--f3c36228-7de1-460e-b278-b37a2a6a34d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571b4990-badb-43c4-9723-0610fef424cf", "sighting_of_ref": "indicator--a2edd4ca-dab3-433f-ad2a-bc0328b7d981", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5c81b8-c541-4bb6-93f4-217e600a02d6", "sighting_of_ref": "indicator--df908cf6-08d1-4db8-aa0e-72743ebc16c3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71170719-88d7-4f8b-abc1-a2447266ae21", "sighting_of_ref": "indicator--adb8d3db-89ba-4f00-89dd-dbf7ff5dfb14", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8d67dc-f71a-4796-8d98-bb7bc9c5224b", "sighting_of_ref": "indicator--3c0254f0-4404-4a96-b974-55d64cfdca5f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c995e1-c4b1-446b-9803-aaea64728a17", "sighting_of_ref": "indicator--6577d7c7-b1b4-48c4-901d-e6674878ca19", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca4041f-98c2-467c-b49c-da4076c445ee", "sighting_of_ref": "indicator--95e6c048-732f-4b9b-940d-2aa965e19239", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0b629a-1812-4a45-bc4e-9a933878ed53", "sighting_of_ref": "indicator--1c67d299-eac2-49dd-b7a9-344c810eba9e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbde302-a155-4c15-81a4-66fc96795458", "sighting_of_ref": "indicator--c044c3c2-b36b-44ef-90fd-01c0a89e6069", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda3e6e9-ca59-4e86-a8fc-293e3ff350a2", "sighting_of_ref": "indicator--5df47761-1f9b-4fa1-b451-8215b22909d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a80de3-2e0d-4910-8123-653d87305891", "sighting_of_ref": "indicator--aa0ce127-e369-4661-a60b-c132b69c7d34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af0d26e-da0b-48ae-a3f1-d453215335ac", "sighting_of_ref": "indicator--e726a00e-5e2d-4061-be5e-2a7f713416fe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0397dcc4-ff61-4ee9-818d-309cf74bd7c4", "sighting_of_ref": "indicator--59096d97-a2a1-4b94-ba58-389d4c226c01", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d5f70d-c78a-440e-b3af-f4d5f57bd7b2", "sighting_of_ref": "indicator--37d2d702-cbe8-42bf-904c-07e61dabc89f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8067b0b-f9d8-4294-be46-1c0d93fe23b1", "sighting_of_ref": "indicator--13caa4ba-0433-4905-ad55-0230786d3f8d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6bba6c-a857-42ef-9454-166b9fbb611b", "sighting_of_ref": "indicator--1eea3474-b731-412a-a9bb-338ab7ade0f8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c598af4b-84b2-4f3a-b017-50d30c5d0759", "sighting_of_ref": "indicator--29ad2707-0d7d-4540-ac58-b1cd168353ef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70f047a-283e-4e19-8c71-e341797b9462", "sighting_of_ref": "indicator--be27eb4f-e8cc-489f-9d1a-eb3cf1b7ac9c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca120ca-9915-4525-8a1b-8f23e211e95a", "sighting_of_ref": "indicator--d07a1f05-1c28-4fdc-bfd0-c2d46f1462f8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95dd914a-79ec-4ba8-9efd-38972a8b188e", "sighting_of_ref": "indicator--6d24c930-caa7-4860-81e6-53bf345c935a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6cba2a-1d0e-4433-a63c-4d48394f2320", "sighting_of_ref": "indicator--110b5825-733b-4f22-b1a1-31cca2b30e80", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a321ede-89d3-4ff3-a94a-e67bf31cbf1d", "sighting_of_ref": "indicator--60951aa9-8f55-4154-b11a-3299584bdba5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0652bc32-623d-4767-ac90-fd6b44068efc", "sighting_of_ref": "indicator--aa885716-52d9-4517-8efc-62571dc57616", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e2f130-86ef-4e2d-8994-0e5809780890", "sighting_of_ref": "indicator--b12b5ebe-b038-4a11-a7cb-257441a046bb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91531d31-be60-4d7c-bae3-793aeeee4d54", "sighting_of_ref": "indicator--b12b5ebe-b038-4a11-a7cb-257441a046bb", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27df396-b85e-40c4-b84c-b5b04fa2fa1d", "sighting_of_ref": "indicator--b12b5ebe-b038-4a11-a7cb-257441a046bb", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7551418-1147-4699-80eb-5f2c04037796", "sighting_of_ref": "indicator--05ca2264-8b6b-418d-b7d5-ab8195d47031", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c90aa20-d93e-4a28-b2df-2bf9f6b56287", "sighting_of_ref": "indicator--43d4dda3-8cb9-47cb-9fa2-afbc42a2b2f7", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7693bc5e-c518-447d-99af-1cdc0bc1fd77", "sighting_of_ref": "indicator--a649144d-95bb-48db-955a-900a785b5344", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffcf2c85-f0e9-455a-a136-3643c613d813", "sighting_of_ref": "indicator--e7b20512-441c-4004-af14-8bee1cbd3eeb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642daf2a-39a2-44f3-938e-d4989cff6a8f", "sighting_of_ref": "indicator--0b74ad53-214d-44f3-9d04-998d17a89632", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b0eb6e-8c45-4156-8f05-08526a7eb40a", "sighting_of_ref": "indicator--aabd9725-ff95-4957-b9f0-7e7940095a08", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157c1a69-5362-48e6-9145-f59e7dae7817", "sighting_of_ref": "indicator--75170e80-c662-4c03-9772-372ddf24343b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc6d456-528d-4e55-80c7-bd815f409c6e", "sighting_of_ref": "indicator--ff887fc3-a4f7-4a4a-b810-319328e5880e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc94446b-fdb4-4b45-876c-44835ba14421", "sighting_of_ref": "indicator--ce11558e-4a8e-49d3-8303-2cd817fbba89", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f73051-ac89-4b46-b775-b1f43d18ba27", "sighting_of_ref": "indicator--b301d6e2-41eb-4f6b-bdaa-b3448af85fdc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc12fc0a-8b6e-42c2-a333-ca95401c9e6e", "sighting_of_ref": "indicator--2569eeca-f13d-4a16-9363-d69458a38b60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c045411-58f7-4026-be40-e3a9f39d3dbb", "sighting_of_ref": "indicator--2567c255-ea06-4c81-8e5c-858544d32cb8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5b6a8e-e230-46ca-9ef1-fde5638f5d84", "sighting_of_ref": "indicator--97bcdba4-05c5-42ea-b13a-d5ae480c648c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1650b75b-ee8e-4356-847b-36778c3e3dc5", "sighting_of_ref": "indicator--369787f1-5da1-4f3a-920c-e81467df6ad2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9d4d76-a184-4c02-ba1c-41d2920bbc9c", "sighting_of_ref": "indicator--24df459a-ad2a-4620-b584-9fa90b708670", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801bb521-23d9-450e-bd88-b88aa7ed46a6", "sighting_of_ref": "indicator--082ef115-86da-4784-b978-fd99c501d424", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3569e67d-a748-4062-8a1e-971680b0dfb0", "sighting_of_ref": "indicator--c883a543-6c88-4099-a4a3-900c35d12351", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88078a32-fae0-4951-b165-36263dfe782a", "sighting_of_ref": "indicator--7c78fca3-0c32-41f6-827d-34433794a134", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e47d325-af1b-4346-b1a8-1ea14f4a9d53", "sighting_of_ref": "indicator--f8eba4d0-d990-46da-97a8-058d68e3e1aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a3f1e0-7f25-4dca-a769-90f935f5cdab", "sighting_of_ref": "indicator--2c52a569-d7a5-4da7-a116-2b87ecb400c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52fe6fe-b100-4aa8-b293-b7a23f4d00b7", "sighting_of_ref": "indicator--37b3d7b1-83e9-46e3-8e31-384f16daa391", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95679a70-7c28-4c7f-8c1d-2fc8f92416df", "sighting_of_ref": "indicator--bb2c0ccf-00cc-4097-847c-4e0c5833c1fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416b8884-a1b1-4d47-9675-271978887e82", "sighting_of_ref": "indicator--b93235f5-124d-478d-8fc3-1e9eebbe3920", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bbcd39-16bf-4198-93c0-5c31f5fe31dc", "sighting_of_ref": "indicator--01b68374-b231-4c6c-af4d-eab356523d01", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bc48de-221a-417c-aab9-5173c084c74d", "sighting_of_ref": "indicator--228b6ab6-eb1b-40d1-8a58-7a1bb4807dd2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2150d47-ea8f-4f15-8a42-077059ad27db", "sighting_of_ref": "indicator--aacaae66-9743-49bc-a96c-2dffb9e09aa9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797312e9-c3c8-459c-89b3-e67620b467c2", "sighting_of_ref": "indicator--fc8527da-e766-44e5-8537-059090fe12cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2627ef9-4760-41cb-9f38-f67dbcbadc79", "sighting_of_ref": "indicator--a661c8d6-481e-46ff-a133-94c092dd9176", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c2080b-c638-43d8-b22f-1947781cca81", "sighting_of_ref": "indicator--b47b34b4-3450-437e-849f-1a3993a9d800", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803b96f4-2b86-4ca7-8625-9e76c5f2d5e5", "sighting_of_ref": "indicator--6af62ef7-1a05-4183-b6ad-08b74c302b46", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c43c83f-2b61-43c5-ba94-b2fdadd5c0de", "sighting_of_ref": "indicator--c7995975-9a2d-4c36-a89c-0d2760544356", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4636fc-610a-4668-bcfd-441f617d1d40", "sighting_of_ref": "indicator--244f9dda-33e3-4d75-bcfa-a72f8d0246bf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f67f2e-6c80-4ddf-9441-8b48311cf6ca", "sighting_of_ref": "indicator--0b04453e-a881-4e72-97f2-26b0de910b4e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98f1b87-80bc-4899-ae2f-79e91c904037", "sighting_of_ref": "indicator--9e40d6b5-8947-4a05-93ac-81c95c283fc1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386dee8f-e325-4130-aec6-15fab3a092ba", "sighting_of_ref": "indicator--e8578b1f-55dd-4610-81a0-b9c802d2bb8b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fe8788-a13c-4599-b155-33be643e4af1", "sighting_of_ref": "indicator--42b6f123-54bc-4993-95bb-b2cab007e91b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2dfb925-ca3a-416c-abaa-975184878ffe", "sighting_of_ref": "indicator--91601fd4-e75e-46b6-8f73-a5ff79e4bd22", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a6aae4-117b-4268-b833-8a0b0624633f", "sighting_of_ref": "indicator--551fb18f-bed6-4bb1-ac01-1dcee135960e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79175949-fcb3-4d6a-bff2-372c1188a8bf", "sighting_of_ref": "indicator--9c99b863-ec45-47c6-9821-b9499324b0e5", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8a83b4-a1c8-43b8-bd00-d94a8b386f2c", "sighting_of_ref": "indicator--d2f2f043-2e57-4d68-aceb-713edc57cfcb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a9fad3-089e-4b5e-aa3f-ba72dd2024fb", "sighting_of_ref": "indicator--8b5ca5cf-ffab-43ec-8810-8820730f467e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cee9dfa-bd10-4393-86a7-80458033742c", "sighting_of_ref": "indicator--7a04217f-79ab-4484-91d0-e463c45f2dc9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4bf14f-b374-42f7-9299-0b98efe07818", "sighting_of_ref": "indicator--b05e5a2d-48e0-45e0-bbef-39b396943013", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d35b3c-10f8-4462-97c9-b4e54f9c0735", "sighting_of_ref": "indicator--a81d2dea-7101-4276-998f-3107adda8e9d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f66641-d247-492f-9814-99b946c3d547", "sighting_of_ref": "indicator--274ec2eb-9d4d-4d91-9758-1b8f78e38233", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe9f26a-6f40-4845-a4ac-1493d54af9c1", "sighting_of_ref": "indicator--5e66f12e-4103-4bb8-9a9c-33b513c1d384", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c83d2c-0e63-4261-a66b-94ac145073d8", "sighting_of_ref": "indicator--5dba9bde-04db-48a3-81a5-2744fc8742c8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88203502-c1d6-4578-bffe-903a5f18a5a9", "sighting_of_ref": "indicator--63962e0e-e75c-4675-b851-0ca79d4ca845", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59965b8-55f4-4fae-baf0-f0b215a02348", "sighting_of_ref": "indicator--0e74881d-00c9-43f2-babb-b457b2abba94", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5bf230a-a4c3-4988-a518-be76cf6ace3f", "sighting_of_ref": "indicator--5f5216ae-116d-41f5-b168-49319965f3f7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86c671c-3c63-4148-b938-394a31b066b0", "sighting_of_ref": "indicator--482b1bb1-4c46-4a29-958f-51fab105bb86", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23784bc5-441e-449f-b45e-d7774c7c9db1", "sighting_of_ref": "indicator--b5f6a15e-931d-4058-9b13-524fbc824dab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf20b09-138f-441d-8bdd-5ffe2de52876", "sighting_of_ref": "indicator--37eeb8d2-0d9f-4da3-9c4c-8802b9bf8292", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d485e452-4ee0-49e3-9d4f-c6448b8dea10", "sighting_of_ref": "indicator--243d0e7b-26a4-4717-acc9-28b12a647b10", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feac8b54-3a4a-412a-b236-d04f5925e24c", "sighting_of_ref": "indicator--61106c77-1d15-4bf7-924b-fe100858a17a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c9a3b2-cde2-4f85-8894-d7ce16e51826", "sighting_of_ref": "indicator--fb70cc75-5fa5-48bc-bd1d-b385129be09f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adefcffa-45a3-4ee9-8f87-15878e5cc98a", "sighting_of_ref": "indicator--9cd8d844-d639-4a71-9c10-026503df3846", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e261487-a5d2-401d-916e-dd8a0faca48c", "sighting_of_ref": "indicator--f92e647a-1c3b-4437-b3cb-05e31fb8a384", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7321ca13-3dee-40ea-8501-2046263492a8", "sighting_of_ref": "indicator--969dc2c5-80ef-4628-ac9c-f9db9d29e4ee", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb9a251-890b-4b05-ba4f-c5cb206cfd8a", "sighting_of_ref": "indicator--351ea9a0-b092-45e8-9b2e-8a4f80469da5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7cc93a-1e00-47c0-a49e-bf88e3784256", "sighting_of_ref": "indicator--823377aa-981c-4978-82c5-333623d842fb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59718618-8e86-4383-874c-3116fabfb210", "sighting_of_ref": "indicator--f3e5bda9-6253-4863-962f-7ac9041895e3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe06939f-d472-4ce7-9ab7-f01368851514", "sighting_of_ref": "indicator--fc227bbb-540e-4318-8c24-36e4f4ffd88d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb22081-c027-4a07-88a6-3338a95c6fdd", "sighting_of_ref": "indicator--7b867af6-d35e-46c0-94fb-69806311c50a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8f1e78-5f68-4b87-89b7-35216284a94b", "sighting_of_ref": "indicator--e242404c-4e4e-4221-a424-33756a31ccff", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b05792e-2994-49d3-8810-cd19ed8ca628", "sighting_of_ref": "indicator--aea79f69-3240-4027-b492-04faa4a0beeb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f0874e-8d14-40c5-867b-ad0fdf599a1b", "sighting_of_ref": "indicator--120020bd-e084-481e-9ad6-8f71006df526", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f1b22a-be34-418f-9cbd-883c76335a30", "sighting_of_ref": "indicator--e93dc7ce-eb06-4806-91cc-2d6799f1b1e2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79128924-cce6-4030-bcd3-9ac4d61fd67d", "sighting_of_ref": "indicator--9a90d6f8-952c-43dc-84b9-57df48455edc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd4f2ee-874e-4b09-9b55-30ff58947ca2", "sighting_of_ref": "indicator--a1599241-ed95-425a-b642-eeb8e17a39d0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f66c6e6-6437-46ae-b2ed-82b4d24f8132", "sighting_of_ref": "indicator--b4dd8b97-779d-4301-af6b-1d7f741f4bf6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1939e6-fca9-4609-a6fb-5a0d57801529", "sighting_of_ref": "indicator--f0e61ea6-88da-4ab0-986f-d47263c342d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e41421-701b-48ad-b2d8-e70a44896a45", "sighting_of_ref": "indicator--d8f58580-b853-4bd9-aaa0-b4bc5acbdccd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94c1494-854d-48a3-a720-a7fd40dd6320", "sighting_of_ref": "indicator--12824e8c-9875-48c2-b134-fa5b5be0b871", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9ee251-8de5-4613-a798-984b322d3313", "sighting_of_ref": "indicator--992ddd53-4563-4ffb-baf7-4e7e6ce2d7b5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcf1ea6-6ce3-458b-b050-251fdf46e98c", "sighting_of_ref": "indicator--6c957e27-e1b4-4137-af5a-4b9199b60263", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe4fd95-d5cd-48da-b3b2-3b873fc4eb8e", "sighting_of_ref": "indicator--6cc61e3e-668c-49ca-9f5a-ee0c646d0eaf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868ddb7e-a8dc-46e0-b504-f5432f43613b", "sighting_of_ref": "indicator--95637c91-58bd-4778-a68d-2da563aa9866", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb2f88d-f8bb-4cbc-8119-b09f6c6dfd10", "sighting_of_ref": "indicator--e3fd6082-9f55-453b-acf5-5aa7dbe22fa0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54be645a-30b9-4d8e-b801-6c9441164b7d", "sighting_of_ref": "indicator--20c82490-fb56-4b28-b5a9-1422a9a2b932", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0da8fe9-10fa-46cc-bc8e-7fa69802e430", "sighting_of_ref": "indicator--83c343c4-42ca-4628-9772-e88d6d0859b4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1be1ce2-0ae2-4e83-b928-ebfed9627635", "sighting_of_ref": "indicator--e90da527-56cb-4af5-adeb-fca21d6e004d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ea550b-a93a-41c4-a9c9-bfc4e6929cab", "sighting_of_ref": "indicator--772114ac-565b-4312-ab1e-1fedbef198c8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6713d8b7-1a92-4c7a-a923-be45248cc5bd", "sighting_of_ref": "indicator--ec17eea7-c99d-49c2-bba5-3fa9093ec9b0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7225d5-ecf4-4e40-bffb-82a06844b85c", "sighting_of_ref": "indicator--ad627ebf-4a99-4fc1-ba9c-fb1dc74d35a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679e1479-e8e3-4cb2-b242-706692b29244", "sighting_of_ref": "indicator--db7aedff-e830-498c-9690-904bdcf04d37", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cafac9-11b0-41a9-8218-adbdb917cb18", "sighting_of_ref": "indicator--3cc2a7cd-893f-4ead-a5e0-3b121aea4225", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c638d8-57d7-4c6e-852a-9e3a6e7956ba", "sighting_of_ref": "indicator--04d64c8f-887a-4d07-8f66-e63354e739c5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fb4551-a436-4fc8-8467-ed4f9283ca9f", "sighting_of_ref": "indicator--2ff38bca-61aa-4ba5-a237-be09276a190f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe9dbb5-6f7f-45b4-ac4d-fde8e10ecaa2", "sighting_of_ref": "indicator--6e3ac604-bc6b-4d47-b7c8-8abbdba3d79f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598ea17e-7086-4e0c-9bee-bb05656d2a40", "sighting_of_ref": "indicator--b24eb9dc-096f-4034-a853-3d4fbcd721cc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35307a2-bddc-4be3-abf4-be6e72781b9b", "sighting_of_ref": "indicator--301c4a1c-a989-4759-a710-181b6cc03dd7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c22884-01bd-4a77-b373-e1f27e9960f4", "sighting_of_ref": "indicator--9da54354-f197-4dda-8adc-7932b7db4084", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abaa3e25-d7aa-4053-9da6-4a9e500a484b", "sighting_of_ref": "indicator--8f9ad060-0768-4804-850a-c585ddc8ac4b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe8fd09-2ef3-4863-9d85-7ada175e5fd3", "sighting_of_ref": "indicator--f63e8d9d-c70f-43dc-9400-e0e77ba1de97", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62977320-6866-4929-8d6e-0f875365dde0", "sighting_of_ref": "indicator--af9e59e5-6b81-498d-86cf-53226af2bb35", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62743b1-8e19-4a1f-9396-dda9ab1e6372", "sighting_of_ref": "indicator--29b98bfe-52dc-43b9-b2f6-be68aa7a146d", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb92173-bc4d-45d9-8229-ab7bd37e82f5", "sighting_of_ref": "indicator--7ac7ea45-ee0d-4c1c-9c86-626ab714de25", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8458f1ed-c2e7-4d53-8040-c898d002aabe", "sighting_of_ref": "indicator--fab35ba3-1204-4522-976f-e342994f88c7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5132e99-e27b-4e39-9480-5a154857334e", "sighting_of_ref": "indicator--431cf727-3bef-4052-83c5-9428c1ff6742", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3a12f8-08df-4de2-88a2-c20cbc119e6a", "sighting_of_ref": "indicator--9df28afb-f71f-4464-8a7c-4f4599579ef0", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b289a7fc-b26e-4c76-ac39-62f639e8a3f4", "sighting_of_ref": "indicator--d16977f5-7bee-4a29-9b76-fe17bb1050be", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1670f2-7e93-4f46-accc-2bd775cf7941", "sighting_of_ref": "indicator--172d5cd4-2be0-44a1-b0b9-1b70d2007cb7", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9733730-ead4-4350-bd20-0bf7dccc9c4c", "sighting_of_ref": "indicator--5e12ee4e-ce42-4797-9947-00cdb2d8bc9e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa7ea3d-450e-425e-9d88-b590824b2ea0", "sighting_of_ref": "indicator--a486264a-dcca-4f3e-806c-bae021a45fa2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315aed1e-f5d6-4a15-972d-649af83ccf41", "sighting_of_ref": "indicator--145c7ad4-55b1-4fa2-8128-b330351e454d", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae04b025-2778-4531-b8d2-cca39fac2ba8", "sighting_of_ref": "indicator--d842926c-efd1-4b19-ac07-8bf1a9f34954", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd794a03-4f13-4158-91bd-a71d33cd6c36", "sighting_of_ref": "indicator--02457bf5-d769-4566-ab40-10f7946104e5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9230326e-be07-45ab-86a7-8561625b7e01", "sighting_of_ref": "indicator--a25bfce6-0776-4820-a5ab-c34600ee8ba4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c69537-a27c-40cd-bf58-f86d6af96521", "sighting_of_ref": "indicator--08a6d55e-afd9-4e99-96ab-9d6d6436e282", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a96a7f-382d-4e6a-b7f3-7ffb58751423", "sighting_of_ref": "indicator--74eccba3-0ea6-4f53-8ade-88a9f8bbb307", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cc0757-c735-4c2c-a93b-ecfe44ce45a4", "sighting_of_ref": "indicator--ccaddbc3-7dc5-47ca-afdd-275fb8e2893e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30677c49-f417-4f6d-8c97-5f16d35ba3da", "sighting_of_ref": "indicator--d523f844-d943-4ef4-81ea-e98f4030e964", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1d412a-7c02-429c-965b-ccebdca56124", "sighting_of_ref": "indicator--10e450d2-f944-4cc1-b14e-bc014a79158e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3422ddf6-4d93-4268-b871-a3e1e37e0555", "sighting_of_ref": "indicator--ba1a78a7-0884-4be6-88e0-acbb8ca2d8fc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec89f65e-4862-486a-a8bc-b3b19b50c9aa", "sighting_of_ref": "indicator--70990a52-e122-42eb-8efb-2fda1e346a97", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a248f1-bf67-4e79-99de-48c1b605a3f0", "sighting_of_ref": "indicator--41cba612-d6af-4489-a58d-c3a894af46f1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afad99d-f278-4c0b-9d3f-7d779a8ee972", "sighting_of_ref": "indicator--855cdaab-0c66-4c97-8ded-457089930b61", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f317b7b-0f88-478f-88fd-51e1c864f644", "sighting_of_ref": "indicator--e5ab9630-a5a7-4f73-9ad6-780b66e3f977", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d5da22-b39a-41b8-b649-45ce38b883df", "sighting_of_ref": "indicator--186ad56a-ae5d-42a3-bf65-148797f98273", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ecce78a-ae21-4e51-b36c-a43092281004", "sighting_of_ref": "indicator--67676e9b-93a9-4b63-b27d-b9e372cf8e13", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd43c12-d40a-44bc-907d-753f681e7c4a", "sighting_of_ref": "indicator--fd263b8a-b591-4baa-9556-b89a65b039d7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d63a0a-63eb-436e-8717-b1f0ba5dc2bb", "sighting_of_ref": "indicator--bb91bb1d-f98e-48db-aabe-5bb68e01cebe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e003cd-6d1e-4a01-b1ea-fe853ffc5e13", "sighting_of_ref": "indicator--73da5d49-acdf-4113-89ce-c893191a4cd3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bef20d-add5-43a2-a92a-81adcf7bf65d", "sighting_of_ref": "indicator--73152994-d233-4e2f-b8aa-b0953ff5cdef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518a7e1f-862e-4f47-86e4-3e444f367dc2", "sighting_of_ref": "indicator--07e2ba83-4773-43ec-a737-509b2b45f215", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1b3e6f-7305-461b-bc23-1c5dae9a2a22", "sighting_of_ref": "indicator--7d70aec0-7ad5-4e62-b43f-e25afd723d6e", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e577ee-cd88-4b44-9d72-b3f5393ac8b0", "sighting_of_ref": "indicator--92667211-4a3b-4ae3-bc29-8e22d626446d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4a7d1b-12f3-402f-9eed-f9f9afd2edf7", "sighting_of_ref": "indicator--2c21995f-fa63-4a9d-ab09-04e305ccae0d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58f7497-6bae-4ae5-a54e-71a52f2c83e6", "sighting_of_ref": "indicator--3ad00122-1a57-4737-934a-7338595b5d7f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a30f01-4d9e-4c1c-8c15-b75c79d42b67", "sighting_of_ref": "indicator--ec69d9a9-cfc1-4fc3-90ea-7c6d3013c86e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acfb369c-6fba-4f79-98d6-f4171a92a1dc", "sighting_of_ref": "indicator--0afd4bbd-5c7f-42e8-8be9-74fde76f8d20", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce5a66b-2542-4849-830f-00f8d9d876d0", "sighting_of_ref": "indicator--a333a166-9c6f-4a76-ae30-903b667f73da", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd0aaa9-4643-43e2-95fe-c58c37b39046", "sighting_of_ref": "indicator--d6b20995-0202-47f9-b2ba-a7b273ed0108", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfb75b5-2f54-4665-bee2-8e21ad441501", "sighting_of_ref": "indicator--ff4bbd02-ff81-4bfc-b250-d9795c4710dc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085967a2-d899-4df7-b1fc-6714aeef6730", "sighting_of_ref": "indicator--3b7f194f-a438-476f-a190-30d1971551c6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b020eeb6-09ac-4a3d-a6fb-ca98f1497a9f", "sighting_of_ref": "indicator--f3f11d4e-a8fa-43a3-86f0-e5391e857854", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42457da7-5547-4c7f-a3ee-17ff40c2a586", "sighting_of_ref": "indicator--50db7e22-409f-4ad0-99d0-8d59c2a20880", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c976c29f-2a47-48e5-aa08-a7975c507d96", "sighting_of_ref": "indicator--21c95978-0588-4802-8375-15155848a4bb", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7ed620-175e-45a3-a044-eb1e3a232b6e", "sighting_of_ref": "indicator--0ddc51eb-e420-4bef-b184-a860369c7127", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dba5574-44f7-44af-9cbc-b2ebff5df4d1", "sighting_of_ref": "indicator--4684b325-4c56-4811-9e00-65cf40a908d4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f246b0d-6af4-48b4-ab51-e0653539eed1", "sighting_of_ref": "indicator--9b91b9f6-5ea1-49c3-b645-bad50660e572", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e23a14b-d2fb-4d3c-a8c3-21d283dd5803", "sighting_of_ref": "indicator--c4f66e74-25a8-4593-8c62-85f27aa2dd6f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c96c236-2cd5-4bc2-8cdc-ab037cba35af", "sighting_of_ref": "indicator--08448b70-0ec4-424a-822d-cee52ebe0bfa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a23e502-9892-4350-8b74-5029de9e9e7c", "sighting_of_ref": "indicator--49179b67-2a13-4968-b604-66de0802d2d9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6f560f-9c05-42be-84b1-7f5c3ed9d449", "sighting_of_ref": "indicator--93b4aca9-5d9c-4594-97f1-b090bc85d602", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1094a68-b51b-478f-af76-13507f4ae307", "sighting_of_ref": "indicator--735b2b52-ea13-4466-a32f-efc84c1d81ed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe7eb87-a766-4ba3-8e49-f55e90232586", "sighting_of_ref": "indicator--063d819d-6634-462a-a4e9-9d4444a0ec7e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610ddaa8-d6ba-4a85-b593-c61d7192fc45", "sighting_of_ref": "indicator--403193da-25b3-4b23-b4a4-d8291787b7fc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba69ccc-ce3b-4c57-b5fc-215cfd412981", "sighting_of_ref": "indicator--17206214-902f-4fdf-98b9-823e0c83ce11", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddb6f00-ca34-4041-97dc-a6019ff0fac0", "sighting_of_ref": "indicator--bd9d4d63-5033-4a6e-81c9-6764dd7e774f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11eebafe-421f-4c8e-abd3-ebcfad776abd", "sighting_of_ref": "indicator--44074089-d908-4746-9621-7a9d1e560abe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6beadce-8cd2-4005-90b5-1e1b9f9376bf", "sighting_of_ref": "indicator--20684201-638e-4b27-adb7-f32c3d6d2240", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbad7aa-9766-40bc-86b3-99a8a441f276", "sighting_of_ref": "indicator--65edd586-8706-44d2-b5de-924f09d29a33", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db43640f-f345-4fc7-b320-a80e44cada7d", "sighting_of_ref": "indicator--d6a3cbdd-d569-4be7-a41e-425c985ac400", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052fc5c9-dda9-47fc-8488-c8b5933ed272", "sighting_of_ref": "indicator--55b39a0a-597c-441e-89ff-80a7252b9b33", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39afa399-b9df-4b99-9a0b-61e5deeab520", "sighting_of_ref": "indicator--d94fcfc5-4317-427a-874f-ab716a21244d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc62c85c-0693-447f-aa7a-2c453cd4952b", "sighting_of_ref": "indicator--54dd758d-329b-4ce6-94b3-33bdf3dd43b3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8d29ed-9bf8-4ae4-bfd9-0d7b616ab587", "sighting_of_ref": "indicator--270c0a72-84e0-4022-bc58-cecc9a62edfa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7d10ed-30ba-4649-a025-83f8518a90c8", "sighting_of_ref": "indicator--f5e694e7-1f67-4809-a08b-982ccc441a95", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1369c1c4-5ea7-49e2-84a9-cfcbea51e93f", "sighting_of_ref": "indicator--3f41deaa-e76d-4a1a-9364-e642429ca680", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e81e198-77b1-4388-a52b-d36ffadf644d", "sighting_of_ref": "indicator--e702ff97-3f72-453c-bc59-7772309bcd4f", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c844c2a2-fddd-4a22-92b3-3e5e8cd9d286", "sighting_of_ref": "indicator--d88fe2cc-28b9-4089-a02c-5fcc5117dd22", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbe7cc9-2eaa-4c7b-87e9-3a9607e132e7", "sighting_of_ref": "indicator--7271f1ac-081d-4f51-aaf0-0aae1a896aa3", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444220d5-1905-4fea-a833-51a126ac2681", "sighting_of_ref": "indicator--81a50e01-d9a7-4d94-989c-4cdb9b160ef5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587c87e3-0496-4fba-bf8c-8489b777a609", "sighting_of_ref": "indicator--2591d1c3-c55e-4407-b8f2-f1668353530e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7107e2e-e9c7-489c-8bf8-d42cc07c8701", "sighting_of_ref": "indicator--96b731b2-3379-42ee-b0de-3b3e430bf986", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607a9ece-9cb1-463e-9b1b-5e2393dee815", "sighting_of_ref": "indicator--02e90f67-97bf-473a-a2ea-82b46e614a4a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82ecaa7-247c-4edc-add8-effd4fdea186", "sighting_of_ref": "indicator--519c3f06-6028-421e-abce-6f510c1bbf72", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea38e1f-9c7d-4b0f-a405-a4dc32bf968b", "sighting_of_ref": "indicator--68a84b01-5ad7-4f91-a1af-c822daed464e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785d379f-dee4-492a-97f4-2142d467d509", "sighting_of_ref": "indicator--719a8e33-b5d6-4855-aabd-c942e5576b2d", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1485f726-f780-404a-9bf5-584402681b32", "sighting_of_ref": "indicator--361c89d6-ce2a-4e3b-9647-661264abe674", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a57a42-474a-4a40-a1c4-56fdf6151be8", "sighting_of_ref": "indicator--95bfc67c-da8e-43fb-bb85-4abaea3f2085", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e460a84-c829-4f42-9047-cde6687aefb6", "sighting_of_ref": "indicator--84f76709-c2cf-4c7f-b428-be4e20951c5e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae7c248-c62f-4f6c-b2fc-fa2177b68d1a", "sighting_of_ref": "indicator--f7a075ad-5c7d-4256-9caf-440483852c7b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1204168c-d6af-45fb-92fd-e2afcea2c152", "sighting_of_ref": "indicator--e36cdb41-acd1-4f95-98c3-c27b6d18bce3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c350e69-7c82-4d2e-a3d3-c2e29d3a2fa5", "sighting_of_ref": "indicator--d200fb7a-b7bd-4499-aef6-dba85fb9419b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3827d89f-fec4-467e-9ad3-3dc90b53471c", "sighting_of_ref": "indicator--931376db-2149-4125-84ff-b712b85366a7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d974a3-b31a-4697-9598-c87583ce3d43", "sighting_of_ref": "indicator--8dc0d1e8-20a9-40f4-a68c-c740b72b901f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e10555f-7d64-4988-b627-d1a43014b2da", "sighting_of_ref": "indicator--b96e0398-015a-4a98-8039-3e1264c9b639", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d8e9b2-1e60-457c-b121-c314b62ff341", "sighting_of_ref": "indicator--c37c7ab4-ee53-49be-a364-1bcde16c5e20", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edf347c-c9d5-470b-8803-ed37eec39915", "sighting_of_ref": "indicator--7f6146cc-f7c2-41e9-ac6f-a18bad3f65e8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7108d9f1-85a0-4be7-b5f0-6928b0303e3f", "sighting_of_ref": "indicator--1d55724a-b4fe-42e6-9e55-4d9de6467464", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae6300f-95f9-44a3-a208-a85a81a81b51", "sighting_of_ref": "indicator--3f6ae5bc-82d0-480a-9557-1aee81c55840", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d54cb95-6cfc-49c4-bee9-1b297433c923", "sighting_of_ref": "indicator--1b805b97-51b5-421f-82c7-1b09e06d35ad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee0c540-5a55-4fb0-8509-83df5793ae42", "sighting_of_ref": "indicator--7dc62300-b1c1-4907-a06a-5b9d58eb1706", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe37101-48b2-4e51-8fa6-f97513dba4db", "sighting_of_ref": "indicator--40d6737e-0d90-4a28-915f-c171f9bb1245", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ded56d5-e25c-4b23-ad2e-ab8da10f5d3b", "sighting_of_ref": "indicator--d20801b7-b70e-4add-bea9-676c784f04bf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2523b2-7572-4b73-89cc-e9891b1f4cbd", "sighting_of_ref": "indicator--9d5cc8a8-9e1d-4329-999d-2c77b00225eb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ee6e16-7636-41fc-a7ff-d0bc181b52f0", "sighting_of_ref": "indicator--af6d3a56-ebf7-4f36-93e5-9f303f7b3c2e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e141b5bd-d3b3-4363-a38e-cbc7fb67de62", "sighting_of_ref": "indicator--2e1dd51b-83ea-40d2-9267-546057a88538", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160cfbba-6c03-4ffc-b455-8c86070ac301", "sighting_of_ref": "indicator--9955a0c3-3aac-401f-bd29-f55f938c4fa5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb00472d-6aff-4a3c-8116-66cedade0740", "sighting_of_ref": "indicator--81ae2fa1-e160-4881-abef-0961e1543a9e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4635be8-1d1f-4ef1-bffe-38a072e978fc", "sighting_of_ref": "indicator--a0cf0bf6-0d48-4bd9-81ef-da86477b6245", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f099e409-b830-456d-a1d6-5b3dd2e0aeba", "sighting_of_ref": "indicator--467ea5f2-69e0-4bd1-8c24-eafbede45b07", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ce69b3-47dd-4b69-984a-f0116179fcd8", "sighting_of_ref": "indicator--dbccf5cc-1b45-4ebf-9058-d1102b8329ec", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45a6af0-0bb8-49ec-bdfa-a001b31b10e4", "sighting_of_ref": "indicator--1b0378a7-2520-44b0-a17c-78bff46150d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcca0623-78f7-4de6-96d1-3e352a9bd95f", "sighting_of_ref": "indicator--2e9f0da6-920d-41f6-bf91-762f78be4660", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9daf0768-ddb9-4e47-a3f2-e8999a02985a", "sighting_of_ref": "indicator--4be89588-b285-4b04-b2ab-821b925313e3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a1f428-6ad7-4ccc-9171-31e83b7e08aa", "sighting_of_ref": "indicator--5a4bb63e-31af-4a2f-8b84-195f48d9bb68", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abb93d6-a135-48d7-b4ac-161b3403ecf7", "sighting_of_ref": "indicator--f948868d-b785-4833-bc8e-8f127176487f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba68cd7a-2e56-4e01-b5c3-33aff3e0db4f", "sighting_of_ref": "indicator--7a0ef005-7197-4a12-8b04-57e57777b6e8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da576c2-ad89-40aa-ac0a-083a2fa74229", "sighting_of_ref": "indicator--9e80e11e-6c35-4afa-bc22-296655792375", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e788b72-2458-441d-bcf0-d074c9297906", "sighting_of_ref": "indicator--f31f2154-4959-4e29-9adb-147e2c1172fc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6e80e4-7213-4fac-82ee-7dddf3923099", "sighting_of_ref": "indicator--9c9bd13f-d992-4d9f-8fb1-c875bcb595c3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725b1092-00f2-4fe4-8d4d-48430f57a208", "sighting_of_ref": "indicator--7a0395ab-fe53-4951-b806-f690a293ee19", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6456a0d-2411-480b-a21c-a46ca9d612dd", "sighting_of_ref": "indicator--04feac1d-a38b-4f13-907c-f676e0b6eb98", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9384abeb-0a1f-4b74-a809-0463e41371ea", "sighting_of_ref": "indicator--0602c83d-6db7-42a2-af29-752c1810c871", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8e036e-7cef-4e75-bf3a-c9082b231f81", "sighting_of_ref": "indicator--3341a244-ca98-437e-95dc-72a74f6b15a3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94aadc2e-77ed-4ef5-ab64-8335fb1b64a5", "sighting_of_ref": "indicator--31660810-4d07-4726-b44d-220947a011cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3453475a-53ea-4eee-a394-a21230320225", "sighting_of_ref": "indicator--5799a9e8-aafc-4ed4-8be0-8ac2982997c0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8ecdc4-ac9e-4760-becc-0d9c30b3a40e", "sighting_of_ref": "indicator--f3c5ec42-f440-4aa9-8f58-25fbf90d6385", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27838401-94d3-49a7-a4be-06f78c24819f", "sighting_of_ref": "indicator--78f59f75-18c0-4cc7-836a-ce436c78cd5e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ab0fd7-e95d-470e-bedf-7027e113e986", "sighting_of_ref": "indicator--742b0a35-1a1c-495f-8716-f6cb458e7264", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2579e6ca-6b5b-41e3-8caa-2381998e64c0", "sighting_of_ref": "indicator--c03517ee-a4d0-422c-b029-d34b3b782080", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0909b386-8398-4891-ac98-2bc6d950a6b0", "sighting_of_ref": "indicator--33e8a551-dab4-4f93-b142-17f5cf3f1dae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5895af5-6f3b-431e-b3d9-cdf664b3c834", "sighting_of_ref": "indicator--426f0841-343e-4ca8-ac51-e2715ccabc26", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8112bfc-c844-4951-b085-b6185e14eab1", "sighting_of_ref": "indicator--118e00b6-69f2-4dc0-865d-7f71fc28eb64", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40029db-5676-459f-8f89-570716f7db73", "sighting_of_ref": "indicator--263c470a-8730-466f-9e3c-e4c40e0ffc79", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c89919b-ebf9-40ff-a68a-efd481cdadec", "sighting_of_ref": "indicator--e1b58a71-55e6-4b5f-9ab5-830dc88bbf8e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dfa6b5-c912-43c5-a77f-89f5d55ccca0", "sighting_of_ref": "indicator--43e10bc4-2fe4-4e58-ac26-09013f909e82", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3887936-330a-4319-83c9-603f417a5a3e", "sighting_of_ref": "indicator--fe2588a1-aa0c-410e-abc1-f7bfd44504c4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc8dc47-1cdc-42a4-8116-081b272e8e3f", "sighting_of_ref": "indicator--691430cb-09b1-43c2-afb6-c0025bfc924e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7624636b-89dd-48aa-97e7-14e65bbd8f41", "sighting_of_ref": "indicator--7a1f5822-3026-4cc9-8d70-392b0e78003d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ae57f9-5f9b-4f6d-a631-fc7f3d098a29", "sighting_of_ref": "indicator--1556f9d2-5602-4365-9a3c-3b7abb3a1fa8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3df9484-054b-4768-89e3-a34766e0c1f6", "sighting_of_ref": "indicator--68cd99d3-5398-4eab-bb26-472435612361", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93d982b-84fa-4a8d-9983-0425680cd012", "sighting_of_ref": "indicator--185ba86b-75ee-4624-8efe-433a461a5e9a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af29fc7c-79c3-407e-9dc5-0baba67e2188", "sighting_of_ref": "indicator--37659292-c0ff-417d-8e78-4811ce84532e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753bd00d-c552-4dff-a68e-b49f216feb05", "sighting_of_ref": "indicator--6734acaa-9d0f-4699-a282-bab862c64ff7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824fdfc7-a65c-49b2-ac5f-4ce5f41786c6", "sighting_of_ref": "indicator--efd59777-8ec9-4aa2-b5f5-f88270d53659", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cb2c20-2a95-4587-954c-a4fec2effe57", "sighting_of_ref": "indicator--840eed9b-0d5f-4e2e-a627-55addfc6b0e5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fdf8b3-09ec-4364-bcff-5625417c5267", "sighting_of_ref": "indicator--79bb06b0-f35a-49f8-aca9-51e99eb0e031", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6754a2fb-999d-4e16-bab1-e219a163a822", "sighting_of_ref": "indicator--a1032802-d2ee-44cc-a8d5-14df1019ddab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af75973d-f670-4f2c-8ab6-4d1548a89c90", "sighting_of_ref": "indicator--66bfc895-0998-403e-b657-8da833c3cf13", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1093827-daf6-429b-80d5-a901c5e08ac5", "sighting_of_ref": "indicator--d138e352-863a-4dc4-94da-143895a3b05a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9c5b74-24a8-4309-b65c-4afbee5a7c6f", "sighting_of_ref": "indicator--671b8d7e-e10d-4dbf-aeb3-6169f7a10702", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0abfc3-9433-4f1a-873d-153e3b30acf9", "sighting_of_ref": "indicator--ca2d4451-dc95-4294-84f6-441182b477da", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0393df7-2ca3-4f23-859e-003b16127809", "sighting_of_ref": "indicator--399d7ecc-9027-4b07-b7e9-dca970a11509", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29e974c-6bee-4d34-a501-abe7723cfc8d", "sighting_of_ref": "indicator--e2ddeb94-12e2-44a1-b833-c96cb2295252", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb964009-4789-4dd7-b6ef-f001af77dfaf", "sighting_of_ref": "indicator--bfcf694f-499e-44da-85a4-89a2ac1a9c66", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a2b9c1-799d-4ef9-80ac-2119229f84fb", "sighting_of_ref": "indicator--5f64a092-a1f7-436e-a536-7480201833c9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7bb50db-eddc-4ed6-92cb-8362bb0d0575", "sighting_of_ref": "indicator--0b8db54d-b1d5-496d-bc98-bf436f3a3ca1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b592762-2a76-41e3-a7dd-0e4fe8bc8f20", "sighting_of_ref": "indicator--6a57e959-ac48-4a7d-ae4a-b2f54c8a5270", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4445d06e-a293-4396-a574-eee2a979ea8b", "sighting_of_ref": "indicator--5e2318fd-1c68-4c9b-b1fc-66c1e6aa5105", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472d6eee-a35e-4b01-a49e-689f66b5f732", "sighting_of_ref": "indicator--e35b6e2e-19e3-464c-ade7-99be77f25d12", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0964ae0f-69d2-4bf9-881f-7af55537f46f", "sighting_of_ref": "indicator--de0c97d0-0856-4cc4-829a-ff072d7bf1dd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab658128-1960-4ab2-8d84-a9b2bdadf9e5", "sighting_of_ref": "indicator--0df6124b-fbdc-4338-8cfa-83af2fbb3908", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716a86b1-6fff-484e-a1d5-73059a17d7a8", "sighting_of_ref": "indicator--c944a453-5873-427b-af7e-4ad88cae9ed3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c092a94-a7a9-4b33-9772-08b163e23a6e", "sighting_of_ref": "indicator--e22d1f37-d225-4600-a8ba-d27a0971e919", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ae013c-6870-4a3f-bb8d-9e8d73f079ea", "sighting_of_ref": "indicator--b0e4f0b8-e4a1-42a5-93dd-d0f656110940", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389fa98d-354c-439e-966f-3e11af694d43", "sighting_of_ref": "indicator--b0e4f0b8-e4a1-42a5-93dd-d0f656110940", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58c5276-1488-48be-a00f-a8e7c3a0664c", "sighting_of_ref": "indicator--b0e4f0b8-e4a1-42a5-93dd-d0f656110940", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0cb3c7-cf5b-4b9a-a533-b3ec7affc6e3", "sighting_of_ref": "indicator--f8f406d0-cf43-44b7-a95c-bbf03005b758", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19c1062-c3a1-412f-8b8a-e5eb390f31d6", "sighting_of_ref": "indicator--f8f406d0-cf43-44b7-a95c-bbf03005b758", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be95dcb-b337-4d56-96fc-dab5b55bfe76", "sighting_of_ref": "indicator--f8f406d0-cf43-44b7-a95c-bbf03005b758", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5c7270-85da-4eab-a4c9-7520d89279d3", "sighting_of_ref": "indicator--c709235a-0fb6-4e89-b9cb-774a84038fd6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b9d860-d39b-4208-84b8-e4563cb867b2", "sighting_of_ref": "indicator--a33dc6a2-ff0f-4e03-9d81-49e9e7465aba", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa606a3-d670-4cb5-abb0-fa87c0ef27cd", "sighting_of_ref": "indicator--a97f7ba1-5496-4b50-b506-5e3e6350a6e7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad95cf8-fc20-4849-98b6-149b74c296b5", "sighting_of_ref": "indicator--cf3de44b-8b0e-4192-9465-02f6d3b45417", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a20bbd-60e9-48f4-baae-b1767c031635", "sighting_of_ref": "indicator--d25d73a2-b05d-4bd3-bcbf-d65bc9c9da13", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef2e7bf-8b14-45d6-8bd7-19db3a4c35b0", "sighting_of_ref": "indicator--9606ac97-dbe3-4376-a8c5-e5399d7ec6a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c73297-bd45-475c-a1be-aafa4f4e71fb", "sighting_of_ref": "indicator--8f58fdcc-65fe-4cf4-8a59-364375825f78", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d8c31b-a042-483a-b642-de3a9435c8c7", "sighting_of_ref": "indicator--4255aafb-3171-4096-9ccd-ccf108a59825", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891f0ea7-8673-40b3-96b2-80ab71f8b9fe", "sighting_of_ref": "indicator--b7145852-c543-4e04-95b7-5cef718f58e4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd6ac09-be7c-4983-aa9b-f984a6000071", "sighting_of_ref": "indicator--1ecc8132-588a-442e-8d94-9d0ae09a4515", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b65201b-a4c6-41ce-b66f-b967e811acd9", "sighting_of_ref": "indicator--b2424110-fdb3-42f8-a585-3ef275acf9a1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9437754c-90de-4ee3-a273-d1e0bd59260b", "sighting_of_ref": "indicator--8183ab87-7cc5-47e4-96d3-e1efeeb22171", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334eaff4-b681-40b2-be92-7f842c2b33cf", "sighting_of_ref": "indicator--6878a168-6eda-4aa2-8925-66bddfc13dfd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a78c78-3794-4631-8fd3-59a540828fc8", "sighting_of_ref": "indicator--7f789d87-063d-4daf-8b01-3c5615456d9f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be84b71-5a8f-427e-a06d-fd28173fa053", "sighting_of_ref": "indicator--3595d363-e0bd-40f5-a71f-8135ef4a509f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ee9e56-f9c5-45ed-b191-70560383bb18", "sighting_of_ref": "indicator--5a613922-29a5-41ed-97bb-694a3e74f988", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178e59a8-8c67-40f3-a5c3-f76a67f063b6", "sighting_of_ref": "indicator--8d42f7c3-fa83-4dd1-b150-c78c9bdce32c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98ede1e-6550-4270-9e1b-74bf0ae925ba", "sighting_of_ref": "indicator--e8a7cb89-2d44-4e8b-b99a-71bcdc12d47a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881ac652-7efc-4782-8366-16ab6cdd2a10", "sighting_of_ref": "indicator--a8463b5b-6950-49f0-a7e8-9eff23524bd1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b075cad6-8dc0-4ad7-84b9-6a88ea3045c5", "sighting_of_ref": "indicator--e008aee4-afae-42ea-b8b0-72da232b839f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b1cb4c-d9ac-46b1-972b-959df6d5bcc0", "sighting_of_ref": "indicator--886019a2-0be4-48ac-80e2-eb9e93f51694", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b46952-12e8-439f-a167-adf04fecad22", "sighting_of_ref": "indicator--6b9990f4-6407-4c49-9542-0606e73e8d9c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d1fca0-2401-4f0c-8266-f809149c49bc", "sighting_of_ref": "indicator--14a01823-406d-4a28-bfdb-f34f58f60af2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c55225-b2fb-45d4-a08c-6bcef072c576", "sighting_of_ref": "indicator--c9b997e0-52c6-47cc-a5c6-9653ae447514", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9d3d39-e24c-4d21-9127-cccec15c2722", "sighting_of_ref": "indicator--fab0212a-80b9-4522-8992-c2a4680a677a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26af1c8-36f7-4d2a-8bf2-4b462669c907", "sighting_of_ref": "indicator--561dc86d-8363-4169-bfac-9ef4cde9ad42", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a7abca-b6df-489e-b3f3-fb16b6bd86da", "sighting_of_ref": "indicator--7176aa33-dbff-48d4-a4e6-aff5fa8e6334", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f008414-f17c-47a0-acb3-75ec2da07d7a", "sighting_of_ref": "indicator--c13d5cf1-b960-479b-a41b-abc56e33ef51", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245ab792-d533-452c-a86a-245ffb07d08a", "sighting_of_ref": "indicator--ce4e121e-fe9a-49e4-8927-9ed7fac42feb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4af3627-0e4c-4bfb-a676-3fb4b7b9dd0f", "sighting_of_ref": "indicator--afbc6525-a5cc-4de4-bd93-86250c438a38", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248f1422-790d-427b-8613-8c6fa873c249", "sighting_of_ref": "indicator--309bf27c-8cc9-4f6f-aaea-a935f55637ec", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13999e76-9800-4083-95af-a36acebbfc3a", "sighting_of_ref": "indicator--3e62bf0f-adae-4bb9-949c-de6f6aafcd23", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec958124-da02-4d88-8e12-dc11833d93c2", "sighting_of_ref": "indicator--5f83e71d-f42b-4e06-a7e2-624d7aa17584", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d902e0-75f9-441c-8ebe-8b8ac4407a97", "sighting_of_ref": "indicator--b1f43693-cb02-410b-81de-22f8cc8413b3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a10b784-f486-4402-9d49-615280c3a269", "sighting_of_ref": "indicator--27258cd8-c833-482b-9596-7deb559e490f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29292b45-5c71-4531-a1c4-7f8eac99e0f9", "sighting_of_ref": "indicator--d1b44c03-45ae-4aed-8dd1-563f56c41d4a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c308c3-fb54-4801-8b14-7ed7db0b8e7a", "sighting_of_ref": "indicator--c788b2c1-2feb-4d5a-80e7-f05fde2aec74", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bc0aa5-b52f-45d4-9fa4-62b16ffef0c7", "sighting_of_ref": "indicator--4ae4c388-967e-45fd-80e6-ed30b588850f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1b8e3b-4f47-4048-8a24-25135d0c17e1", "sighting_of_ref": "indicator--6227d85c-c123-48e8-b190-92c94a263549", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3c6957-3bd7-4596-b705-512848caea36", "sighting_of_ref": "indicator--7ba70ddb-ce49-4ed7-babf-26adaee6e55f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcc267d-bb4e-47f4-8697-0dbda0cabdae", "sighting_of_ref": "indicator--ee86c481-d7ff-4259-b4fb-cc2fc48e7410", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e2641d-17a7-4753-92ff-a4d2ef23df67", "sighting_of_ref": "indicator--48e64904-7b30-458e-9a2a-223e3fa4b6d3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de8d82d-d8f5-48e2-8612-662d75fb2bf1", "sighting_of_ref": "indicator--550f0ee9-faec-477b-be52-93e03e5a07f9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f1861f-9446-403c-b030-cf7eaa2981ec", "sighting_of_ref": "indicator--80e1866c-304d-4bce-8b12-c8d3da3bcfb5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d9971d-929d-4656-b344-ebe398e0bd78", "sighting_of_ref": "indicator--3f9b8431-3ff8-41fd-9e8f-a91116adbc0c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dba34cf-8e95-4c20-a937-39fe8c25bf36", "sighting_of_ref": "indicator--11be35d2-2568-44f2-8989-6c76b791b11d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03d120a-c548-4c5c-892c-81ec7ff1a92e", "sighting_of_ref": "indicator--c546cf92-b3ae-4924-b14e-64db54309f03", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f60914-22c2-47fb-adab-f9054036d23d", "sighting_of_ref": "indicator--efb3d03e-6d6a-4daf-83f5-90dc5b49189c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee5d70f-cdb2-4978-b4a6-2f902f4062e2", "sighting_of_ref": "indicator--211635a9-a4a9-4596-bb27-4e6cfee9e1f5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4335f0dd-5add-4fe0-a669-1430130b8b70", "sighting_of_ref": "indicator--b94282ab-6c04-48f8-b4d1-7435060e4ad4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e22e9a1-4db6-49f5-be66-0ad6a4931a2b", "sighting_of_ref": "indicator--234c7de1-c630-4f9e-a321-925d47084af2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd28f85-91d0-4ed8-a0cc-b87c930b08da", "sighting_of_ref": "indicator--859a432a-4c42-438f-8aec-7d8cc8ac8723", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885f04ae-3648-4a8f-b395-8b45b23ce806", "sighting_of_ref": "indicator--f97729bc-a8c1-41cb-be6e-5ab82cc1e003", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dabd757b-1195-42ac-9fd6-b2981b9245b9", "sighting_of_ref": "indicator--20e5d98d-aef9-48bd-8cf2-95b950e53c6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3822f1d5-b656-4c40-be5c-4ebf9b45d9b3", "sighting_of_ref": "indicator--c45d8082-b3c2-4e73-a25a-14bbbd5767fe", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb0da5f-ebbf-48ee-9f65-cb78705b96f3", "sighting_of_ref": "indicator--c45d8082-b3c2-4e73-a25a-14bbbd5767fe", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e8ed67-b8bd-4e0d-a44b-4fc13f953e00", "sighting_of_ref": "indicator--8acd109d-d2c5-477d-84f6-62ae98f9e73a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bf9be5-07fd-40d2-a4b1-86dc46c2e098", "sighting_of_ref": "indicator--b043dff0-91c0-4506-84e4-60aa66bc7fe0", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5a9459-f9f6-4d8b-b396-5980285dc9d2", "sighting_of_ref": "indicator--dfd23a13-0b15-44b0-b649-2cf59c9a8466", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c64bcb3-e12e-4677-af2e-4942d8f57e4b", "sighting_of_ref": "indicator--a1f27d83-a979-4881-8b8f-ab97a9b69f6d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25942810-f2ab-44b8-8d60-554354598f3a", "sighting_of_ref": "indicator--a1f27d83-a979-4881-8b8f-ab97a9b69f6d", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a582caf8-cf1f-43ce-a526-0ca07cd16b64", "sighting_of_ref": "indicator--92fef314-71ac-4e00-8b4f-e36f3fba9a71", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d40154-addf-4974-adb4-c5b1ec9c83c4", "sighting_of_ref": "indicator--92fef314-71ac-4e00-8b4f-e36f3fba9a71", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9f6812-02bf-4818-a940-db76beda6731", "sighting_of_ref": "indicator--fde42c27-b59b-4421-96a9-0df979e78ce4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a158725-cb8e-4641-b661-a543e5e71d24", "sighting_of_ref": "indicator--120e7567-9cc7-4b09-8f97-3b1d493a509c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00aaaea-0d01-45ac-8ec0-14bcf9d057af", "sighting_of_ref": "indicator--86dabb94-0ca5-4c0e-a4d8-82d86af024e8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6da5d1-6f80-492e-9da5-3a74de8e9b3e", "sighting_of_ref": "indicator--8968cc11-895f-472f-8032-e1b980e7d558", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e16017-51e6-435c-9a08-195070e67ddf", "sighting_of_ref": "indicator--05c3fc7c-fb20-46dd-80eb-ace025165b22", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3846e903-610a-452f-b5da-90d5a45de56b", "sighting_of_ref": "indicator--db8582f0-6e4e-4bf1-adbd-93d772f0d705", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f183320-601e-4f0a-bcf9-c6d842fe9561", "sighting_of_ref": "indicator--f0172f3f-b492-46a0-81c9-942254c7e143", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77611bdd-ac63-4733-9780-eb7c3e96978f", "sighting_of_ref": "indicator--16713ed2-47bb-4606-9e62-4b824f868b03", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed23e39-0f4e-4968-935c-ef285a699448", "sighting_of_ref": "indicator--262db50e-b896-4d42-9aa9-9b6985219461", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c199b93-6867-4fd3-884d-9a8f7a720c7e", "sighting_of_ref": "indicator--87acc506-075d-4344-b508-c50318a43bb2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc052c4d-8a8a-4e44-9e43-195968ec6e47", "sighting_of_ref": "indicator--f05ebf92-eae2-4d9e-bce9-fc1c44b6885c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9944a7-efe5-4533-bd4d-5ee554f6021c", "sighting_of_ref": "indicator--e3bdddb0-521b-4a67-a543-cad2740ddea4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca70708-de3b-451a-938d-aa9d39d8c94e", "sighting_of_ref": "indicator--07386595-de82-41ff-97a9-b35cf5ea2c5e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e916d63-a004-4cd6-90e7-fbe877be8ef1", "sighting_of_ref": "indicator--546b3ac2-e1a9-4935-b7df-f906a42d2f13", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d781f8fa-2abd-4d89-a678-2282fda1f6ce", "sighting_of_ref": "indicator--29d5730c-0f7b-4a0a-9102-e239a47ae386", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ca638d-1ac4-41a9-ae46-8c72fbdcddb7", "sighting_of_ref": "indicator--b92647d8-7c53-4e35-bbdc-7cfc55b27259", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffcfc78-e2c8-43ec-afd7-3d4beb6a9315", "sighting_of_ref": "indicator--1367b444-cca5-40c4-a0ae-d6077dfec173", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd4a506-eba0-4014-b7da-284c8442aa62", "sighting_of_ref": "indicator--ef778810-c6f9-4205-9d43-9237e5ac0839", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57439c2-b889-45ff-b9e7-5a74cce6b51b", "sighting_of_ref": "indicator--40597d4e-f378-4da5-9d73-2baf53365759", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38035f47-292d-432f-97e1-cf97097221f7", "sighting_of_ref": "indicator--d29ea9c5-28d9-4f70-b6f9-0bb98e442725", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89acbf4-d66e-493b-a63e-edfd46749979", "sighting_of_ref": "indicator--b3261231-9dba-43b7-80f9-631b2b28b729", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45e3f5e-924f-411b-a54d-85a62e4d7f17", "sighting_of_ref": "indicator--a1133282-d4fe-4855-abcd-51a641273c56", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f233d46c-4603-411f-9558-df01cdd2457f", "sighting_of_ref": "indicator--0c90d991-3263-425f-8dc4-74a261efb9eb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5948381-8a5f-4769-bbaf-2e10e021801f", "sighting_of_ref": "indicator--63d75705-cf3a-4aa5-a4af-52364956dc5d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c16eebc-4ec7-43bb-8565-7350a6225667", "sighting_of_ref": "indicator--c4c53d40-22a2-4f78-aa78-c35bd9f7f98b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7979a29-08c8-47eb-8bf2-cfb4034d3ad4", "sighting_of_ref": "indicator--38322726-ebc3-40c4-b985-9f05879b422e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22fd4ca-bdb3-44ca-bc2b-b947e932dfc3", "sighting_of_ref": "indicator--a7f88fdb-89a1-4aab-b542-9d3e0229afab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5515bb-df67-434e-8af5-78e423673768", "sighting_of_ref": "indicator--c0363fda-c5f9-4c31-9d33-902c50d947a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfad720-6fb3-4c0c-8244-222be47a5c31", "sighting_of_ref": "indicator--751dfded-c564-4b6d-9385-ee38c68aa306", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2b84bc-3286-4475-9171-2bce7995c811", "sighting_of_ref": "indicator--dfec9dbc-11b0-4b94-8370-3d121870c563", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707d13e8-73f7-4ad6-8ced-c1cbe14c62a3", "sighting_of_ref": "indicator--a0af2f1c-1e27-464a-b794-97be77cfb3a2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6bedf53-e1f2-4ce2-9444-389ba61377e4", "sighting_of_ref": "indicator--4ec003f1-c083-408a-b3c9-bef52c33c9d3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd27476-8a56-4dd4-a805-05fcfb7fd6d4", "sighting_of_ref": "indicator--b0fe238b-ad06-4cc9-87cf-44759fca9381", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88559913-45a4-4eac-92d5-b31442a49dcc", "sighting_of_ref": "indicator--b253b150-2fca-4a20-86f7-9d8f9c5bf13d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f93e715-c731-4a36-ab54-81d03f0e3a35", "sighting_of_ref": "indicator--51442d6a-1a24-4669-808c-2456bda0792b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e3e932-9db4-42fd-ae38-cb2f25a21105", "sighting_of_ref": "indicator--c46c66e2-9b77-4d9b-b5e9-8be266fcca52", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e2ecbe-d70d-4e0e-9f33-77f9e2490880", "sighting_of_ref": "indicator--3e44ee0b-e23a-40c4-962c-dfa047bfecc1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4db8f5c-b0bb-46cb-8348-07e27dddc7b7", "sighting_of_ref": "indicator--62697775-f907-4c56-b749-19c82e37059a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2031ec6d-160a-4078-94d3-5a7bfa46aa41", "sighting_of_ref": "indicator--2e1d49e2-234b-4522-888f-d5eb587b4632", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfdb24a-3dc9-4b3c-899d-1e257bd7a97e", "sighting_of_ref": "indicator--e7c375ae-7e83-41be-a205-4d3ecac27ed3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d0cd18-3ef7-481d-97a4-fd9528435610", "sighting_of_ref": "indicator--a94d7a87-d056-4781-84d3-0d94e47f2281", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77dd13cb-75b9-47ba-9d65-593e66eb152d", "sighting_of_ref": "indicator--3c99009c-b52e-4e8b-8f60-7e0de2bb3405", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0231df70-3789-48bb-9a4e-29de9a37e1d1", "sighting_of_ref": "indicator--001eab67-8996-4474-ab2c-569b31c95e32", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007d8a4a-c56a-4de1-a337-1d584978b0db", "sighting_of_ref": "indicator--149196e4-80c5-4707-9521-2d3f840b5273", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428819f3-c1ec-47d9-8b2a-109706c1903b", "sighting_of_ref": "indicator--3047c023-aea1-4693-8d43-e9636b8809ec", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53eeb945-62b4-46da-9e3d-8e60f42d29c4", "sighting_of_ref": "indicator--b3899bba-e4e1-4d06-9ad2-0f9ebd81e4e2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cc858b-b913-4ae2-a6a5-a8ebaed49728", "sighting_of_ref": "indicator--4a028bb8-ef62-49eb-aca0-a12d4eeb2945", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b20824-7be3-49c2-ad60-695e62705251", "sighting_of_ref": "indicator--184380b5-a315-45ac-991e-3ef3093df576", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9dab59d-2b64-4df7-8a22-1b306716933f", "sighting_of_ref": "indicator--57055138-720f-4b82-a12d-4e77111e824f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1045e29-3109-4ebc-9f29-5ef50ea249c0", "sighting_of_ref": "indicator--e65ea50b-b2de-4cef-a0f4-fdf91cbcbb7d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76619d0-d78c-471c-b6f0-6c0b9898bb29", "sighting_of_ref": "indicator--4fbaef17-9851-4ba6-ae91-cf0f5b12db87", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc3596b-6f47-4356-801c-2651cdb0f36a", "sighting_of_ref": "indicator--3db8ea1c-cd7c-4a65-8d63-1c978d32f016", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c0de90-30bc-4679-83e5-9396bb5e847a", "sighting_of_ref": "indicator--5c27cd85-9ee7-448a-8fbf-8a9e4139a390", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee137cce-d43b-4f7d-916a-5bbb3ab6d842", "sighting_of_ref": "indicator--dc2f8e2a-cad3-49de-91f9-b822f69326e9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a0ce39-0d2e-4a80-81f9-cfb40f0be074", "sighting_of_ref": "indicator--b7bf8ccf-3c95-46c3-9010-7888b36ad6d1", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1871aab0-b3a2-431e-ab4d-34cb0a99e6a4", "sighting_of_ref": "indicator--60f120c7-77eb-4a67-957f-d3f4a6c0e4fb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129244ef-25fd-4db7-bbf5-d1e94fcb79e8", "sighting_of_ref": "indicator--f8e5635e-ce28-41cb-9649-9f31b9bf7c6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b17219-84e0-4195-97c6-d08d3a26baa7", "sighting_of_ref": "indicator--bb76152f-a482-4643-bd04-f7777ab65e20", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083a2172-8497-4086-b900-2d3cbea2b987", "sighting_of_ref": "indicator--3da0d8e6-3ab2-420a-90cb-19fba79fe1e2", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f94c62b-197b-4035-9833-81c637e5d374", "sighting_of_ref": "indicator--9d3df178-a84c-4223-be6d-c6b1fd5390bd", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c318877-6be9-428d-8798-62a6d1fec9a4", "sighting_of_ref": "indicator--d37f422a-4111-43b4-bf3c-b543b69b00ad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ebc00d-956c-46ce-a2be-c004b333794b", "sighting_of_ref": "indicator--e47fc163-1ac8-4ebc-bd61-53a8a8f6d3d8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbd6c4e-61c1-4d01-a6a0-13d794dc3ce6", "sighting_of_ref": "indicator--d375cac0-ce96-4cac-a142-f2b5b2fc2940", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1030648-2802-4f60-bed3-e589e233418c", "sighting_of_ref": "indicator--d19564a6-878e-490e-ae6b-f2573f80ba76", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bce251b-5ec9-4303-96fb-e0a90974bb91", "sighting_of_ref": "indicator--03047f0e-46c4-4b68-a5eb-5da44a8b6000", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b404d59-714f-44fa-b393-0869825d32a6", "sighting_of_ref": "indicator--aece048e-22ad-4609-a3b5-6bcfedecdad5", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160dbcfb-872a-4323-8a4a-0477374f65ac", "sighting_of_ref": "indicator--2ddb5daa-f34c-44ef-b94e-39a9b11c5035", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f9c0b3-5c5a-4b4f-919d-dd01819882db", "sighting_of_ref": "indicator--5aad8d03-5f84-4380-a5ce-7342ec02936f", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8868edee-cec2-47e7-b7dd-6b9b976c0fd4", "sighting_of_ref": "indicator--f62a2c55-343e-457f-9a22-284a9f0acb46", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74890c4-2691-49a0-a507-89f0b6ffd327", "sighting_of_ref": "indicator--1703d544-b867-4ef1-acfb-8b7996f4d65e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eaac3f9-7722-4d17-8957-ecb4a4d4cb3a", "sighting_of_ref": "indicator--8e714783-221e-4851-aab3-3d60e815bdb4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c5adee-5722-4cd7-9a59-daf8cc9262c9", "sighting_of_ref": "indicator--b5f3e2a4-60c8-4c38-99e0-f3626f3b45c8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2405da-7d7e-4b49-b6dd-c71031a59f56", "sighting_of_ref": "indicator--09c405ce-0144-4e13-85cc-6194e6be7080", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65963f3c-d1a9-4da2-950d-aa3fa452ab69", "sighting_of_ref": "indicator--09c405ce-0144-4e13-85cc-6194e6be7080", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a9c420-0e2b-430e-a9dd-43754d9863c3", "sighting_of_ref": "indicator--9a12a528-e900-4d5b-a22f-e561648f08be", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55adad54-0200-41e6-a1c4-3832a6ea38ea", "sighting_of_ref": "indicator--c2007725-36cd-4d00-a6ed-e9a920f2e0a7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488b8fc2-f847-41db-9898-410666b0869d", "sighting_of_ref": "indicator--0b0d1e2f-e124-465b-8fa1-f34f1d9ac25b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f6e610-1a72-495b-be41-eb4586c39a19", "sighting_of_ref": "indicator--3cd8449f-d224-4216-ae06-7491d27aecaf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a331bfb-88b0-4c6a-a63a-e29aedac6999", "sighting_of_ref": "indicator--fbe9514c-29e9-4714-a077-274f32c7ce8c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99c6089-32b0-41bf-9f06-f2d939b86feb", "sighting_of_ref": "indicator--1aa98c40-c280-4926-b2f9-8bf5a332b131", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea44e5b-66f1-4549-9efc-35a6470bce88", "sighting_of_ref": "indicator--1aa98c40-c280-4926-b2f9-8bf5a332b131", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38762f08-843b-4044-8109-576a1357a8eb", "sighting_of_ref": "indicator--66ddc7e5-c4ff-4ad3-b7fb-64a5d656357d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4072058f-4c41-42bd-b949-828da29b5992", "sighting_of_ref": "indicator--66ddc7e5-c4ff-4ad3-b7fb-64a5d656357d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b245091-a919-4de1-b170-e125cdbb8b67", "sighting_of_ref": "indicator--e12f0cb3-42be-42f1-be4b-91806118b580", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4230356-55c8-4f47-95da-3d8c12a89229", "sighting_of_ref": "indicator--723d0cbf-c3b6-4c33-8750-96a5895634a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64da4a5c-7608-4b33-a2ee-5bb30a015c87", "sighting_of_ref": "indicator--967bd95d-67cd-47c3-84c4-4358298c0e3a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35156537-6618-4057-91c0-228e152d15de", "sighting_of_ref": "indicator--6f5a8217-6c36-4b7d-9ff0-4b1a9cfd6b32", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd52dce-166d-4cb1-85bb-c1f05ffd854f", "sighting_of_ref": "indicator--de484413-efa7-47fd-a082-d770ccd25532", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b239ebc6-a5eb-4cea-931f-e933c7ca88dc", "sighting_of_ref": "indicator--fb1d4904-8487-48c2-b327-e150b9289b13", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b2ff11-d07a-4191-8184-757107f170b7", "sighting_of_ref": "indicator--3bf612af-b372-456a-8555-193300ebb3f7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f857e385-3df7-4a95-94f9-1f0f22cdd560", "sighting_of_ref": "indicator--8fa44e13-8632-4490-b9ce-3bee36e791f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775ab7fb-8020-4a9c-8c5d-24dbbe387b23", "sighting_of_ref": "indicator--a2dd065b-b264-43b3-ba5f-6d08e3a4c998", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85b45c4-52bd-4874-9e05-9b626d1761c0", "sighting_of_ref": "indicator--75f903a1-0eae-4737-a622-cd519b2bd436", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9620dacf-4ee0-46a9-9cbd-351d065d96c1", "sighting_of_ref": "indicator--0d3d8df7-0e4f-4802-877f-1ea4732e4243", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5474fdc9-8b6b-4618-af0a-a9584a5fec63", "sighting_of_ref": "indicator--52e9cdaf-0ef5-4063-aec1-714c72beba8c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84012fb-a2c3-48b8-929c-c145b3fac50a", "sighting_of_ref": "indicator--37ebaf0a-bc50-4bcb-86cb-9eaf1a0e35cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7919ea78-0f11-4460-8a56-6c9637b4b233", "sighting_of_ref": "indicator--004c1cd2-c857-4d58-8502-37488210e62d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fb7379-4ff9-41b1-a80c-6a2e604a7f4e", "sighting_of_ref": "indicator--cbef86ce-279a-4aa7-8e1f-540ddcf47520", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362e99ca-a71f-4f08-a7bb-a270fa3871e7", "sighting_of_ref": "indicator--8a9a2baf-b7e2-4276-b156-e62feacaac29", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d51555-4d01-4475-9a46-33099762ec65", "sighting_of_ref": "indicator--ec976508-cb0c-4dae-bcb1-652790e8e5b2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ab4dff-7248-41e0-b000-eefd55b2e6de", "sighting_of_ref": "indicator--abc0cbb3-6bce-4045-ae3c-65502515a272", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0478189c-784a-4292-94c7-4b300a85c1bc", "sighting_of_ref": "indicator--b1cb6dcc-fc81-4aeb-b8a3-19cda493d8da", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9b8cf4-702d-46c3-a78e-1a03f93fde14", "sighting_of_ref": "indicator--e4f41dda-c93a-42f6-9506-06f0c43026c3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bc8849-d1ad-4d9f-9da5-752d8800cc14", "sighting_of_ref": "indicator--ddaab81b-6c06-4f8f-b3a5-fca431fc34a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0206867-997b-49fd-b216-f774029f7f4e", "sighting_of_ref": "indicator--6d19c45d-a512-4ddc-9bb0-ee17755bf8bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77483162-0285-4e22-b2d0-d09721ef7aa2", "sighting_of_ref": "indicator--c7c6b3d1-14f0-498b-984b-e6054d43ebd7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7053b4ab-0c62-45b7-893f-eb972141af09", "sighting_of_ref": "indicator--02179fb8-859e-4daa-9861-0d259b907411", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1591ddc9-b96e-4e0f-9318-a670546a30c9", "sighting_of_ref": "indicator--db4db20a-ce14-4220-b5df-edf2b2dfb986", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d492a3-ee0f-430a-9ae1-36ee7e8fb1eb", "sighting_of_ref": "indicator--74bbd7fa-f1b6-4bda-9e88-22a301e73801", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb939486-c025-4e97-81be-62585483370f", "sighting_of_ref": "indicator--a0e4ba10-563a-408e-b3c1-46f75557200f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180ee248-8b0e-40cb-8dc4-ba2d648cd44e", "sighting_of_ref": "indicator--c3a9b366-4989-4b27-b49f-1e1368f18c2d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2f151c-5a6e-4eed-ad5c-6c7a189f7e59", "sighting_of_ref": "indicator--8cc969a2-a267-4620-8d93-05dd0dca5c8d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c67837-830e-49a0-a376-f8991ad15a66", "sighting_of_ref": "indicator--21464397-97f2-4330-b326-95fc618c7838", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac401581-0ffd-459d-a8c5-dbc847c3557f", "sighting_of_ref": "indicator--36fe7e97-cff2-4b50-98ef-8beada50a5e8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d06538e-f77b-4a65-867a-8a69228e2b71", "sighting_of_ref": "indicator--89063d5a-ed2f-414e-ab4f-89d1ea847f9b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69da725-bdcd-4c41-837f-0327fee58952", "sighting_of_ref": "indicator--2036fcac-cf7c-492d-a210-0182b0333597", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48a999e-12df-4637-a987-b61e26d5269d", "sighting_of_ref": "indicator--b8197e9c-562a-478d-9522-3e91b7eed391", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ee42c6-f2fa-4e32-9111-2baf78b53582", "sighting_of_ref": "indicator--9c0a2884-6106-4f1c-9320-077d78ea063d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c396fd-c11d-477a-a40b-8b0b1d772722", "sighting_of_ref": "indicator--9c0a2884-6106-4f1c-9320-077d78ea063d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0fa7f6-f77f-410e-82e8-96e53db9c8f3", "sighting_of_ref": "indicator--73713ccf-2233-4c31-a9e4-df01caa7dd0b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227feb2c-da95-4cf6-9bce-ef3baf8bfbb0", "sighting_of_ref": "indicator--a04dceb9-6b39-40c1-9b3f-08ef4f4690e8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a477051-9bda-40be-9c05-12b7e95f346f", "sighting_of_ref": "indicator--8eed792c-5aeb-45b5-abc5-6ca7394f421f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecefbbd-4d19-4ad1-8d24-6ffeead4e164", "sighting_of_ref": "indicator--0643fe55-0c53-4633-8832-b4e45908a6db", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d202ed88-1856-4ba1-aa26-d2ee85c8cbdf", "sighting_of_ref": "indicator--81a951e4-00f4-4942-8b24-46f5f5f90ea3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eceb4e9-a1d8-418f-9699-ccae942201a0", "sighting_of_ref": "indicator--06d30ea6-a668-4f14-9624-eaaabe974e05", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83f9f29-0fa0-43fa-b4fc-564eb094f670", "sighting_of_ref": "indicator--7e3e5452-5ad9-4e19-ac44-7906fcb67873", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a324697c-03f1-4ea5-b494-f05da18947cb", "sighting_of_ref": "indicator--7e3e5452-5ad9-4e19-ac44-7906fcb67873", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7689c5d9-df7f-4624-8be3-d6cc50e6f794", "sighting_of_ref": "indicator--2d9d2021-8253-4d3a-9c39-db344890390e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4bf87d-a3b9-4bf3-941b-eb26dee36436", "sighting_of_ref": "indicator--fed0a958-2fa9-4e4e-af87-a276707bd748", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be64db0e-8739-47aa-9b79-b3088972b0a3", "sighting_of_ref": "indicator--b2454550-dde4-4afd-a561-92b5fa596d01", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213e46b6-d99e-47d7-8a80-eb5906f9d232", "sighting_of_ref": "indicator--b3a9a3bd-b4ab-490f-87d0-ce0c859b31c4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5cde11-6779-41d5-8152-cb878e418a17", "sighting_of_ref": "indicator--52bf7e2d-ea44-44cb-9c0c-813cd0b3613f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987471d0-89bc-48b9-bed2-860c2e64dece", "sighting_of_ref": "indicator--4ce0603b-1761-466b-9dce-a0b0efc9da4b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740bb70f-0d18-4610-bf45-9b925099b6cc", "sighting_of_ref": "indicator--4ce0603b-1761-466b-9dce-a0b0efc9da4b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c5a82e-3fc3-4eb8-a0bd-7c6d9af1bd99", "sighting_of_ref": "indicator--94a6a7c4-9ef2-490c-a101-59123fa4b2ca", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e299011-ec26-4d62-811f-cf3324a62c80", "sighting_of_ref": "indicator--d08818c7-3b6a-4cd8-9d04-26b1c055889b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614581eb-9087-45cb-b42f-73608632fcd1", "sighting_of_ref": "indicator--1730d1ca-5a5f-4cb3-ad73-78f6137b35d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a85dfe5-e236-463f-b1ab-042477c5773c", "sighting_of_ref": "indicator--16a92783-08ac-46bd-849c-76605f2a0c9a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d6a269-2897-4f08-988f-d953ce95fbcf", "sighting_of_ref": "indicator--67ed1b40-37cc-4596-bf50-f5b2066ff3cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1109f7f3-733e-4877-b4a3-c84bcc8cbd64", "sighting_of_ref": "indicator--c338c546-227b-4de0-81d0-0d10fe57c5a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d4f896-2d15-487e-93df-66e9a2c34ee8", "sighting_of_ref": "indicator--fe4d921a-14b8-42fe-a41d-89c7207c5960", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0e2e62-3975-4024-8ba9-1720e811ddd8", "sighting_of_ref": "indicator--49d896bd-4cc2-4f08-b5d1-54e108eccde5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47cacc88-a4ce-4d40-ac45-8e2cd19de160", "sighting_of_ref": "indicator--c0cda9ba-6436-46a8-9f39-7a11d218ee1c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7706e5a-3dfe-490e-9614-4dd723116f39", "sighting_of_ref": "indicator--c0cda9ba-6436-46a8-9f39-7a11d218ee1c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2999dd4-24f1-4ec3-a420-8de7e6a516a8", "sighting_of_ref": "indicator--f5a41531-1dba-4eb7-9e73-ea9d7971cb18", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a64101f-4802-49b4-9643-f1439af4f8e8", "sighting_of_ref": "indicator--491cff7a-3c99-4060-b8f2-3cc3dae3a33a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d5ec85-dd68-4174-921e-02bc88c00a8d", "sighting_of_ref": "indicator--e6396fbf-e9c2-4722-9386-ccc2b6bb543b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81fdba5-3b8d-4ec5-bc54-126b97e9f9c2", "sighting_of_ref": "indicator--fd093b6c-73ef-40dc-b542-eddc6321364e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3c82a9-98f3-49ff-84b1-c66b4cd236c9", "sighting_of_ref": "indicator--17986c4a-db55-4452-9b9f-b1607fbccfe3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a0a554-0486-4500-9d48-0cb286dc21ad", "sighting_of_ref": "indicator--5ecc0a99-7d78-47af-a398-876d4e4a131e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2513609-ea44-4a92-b2e2-fe91666a9ae3", "sighting_of_ref": "indicator--5cdbb9dc-079f-4a1a-815f-a0b995e2c551", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33023706-b598-44c8-af01-368051813370", "sighting_of_ref": "indicator--0e15f891-2c8c-4d2d-9ec4-3378d6c1d618", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a70037-f02a-49e4-9d55-08c1b6cd1648", "sighting_of_ref": "indicator--d6e0ef5a-65cd-402a-9643-afdb030e06f3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1feec532-d55b-4053-aa9a-495ad37bfb56", "sighting_of_ref": "indicator--4f6d7516-bed9-4725-8cb1-36284d0a603a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f36e04-f432-4ee1-a6d1-885295789543", "sighting_of_ref": "indicator--0ae6440d-4faf-4434-af83-7f954202053e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5055c98e-e20f-4422-9bc5-5ecd8c1432ea", "sighting_of_ref": "indicator--eb7c4695-ddb4-4163-8354-3f7f228859a1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99493f67-a472-438e-8aef-e2e3d425f307", "sighting_of_ref": "indicator--ba5d5dfc-f122-4c40-a75c-1fc45e47b18d", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5403cb-279c-4a16-8c85-837ce0484986", "sighting_of_ref": "indicator--547cdf6e-413f-4fdb-bb01-15ad35298ee9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a501be-1e17-4d98-aab7-f83e40211c15", "sighting_of_ref": "indicator--205d179b-8123-440f-91be-740cc14fef78", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08755a27-0e44-4ce9-ac9a-207d53d2229d", "sighting_of_ref": "indicator--29429953-2217-4a2c-bd23-cd42011fdfe4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904e05fc-8f7f-46ee-9b23-dbb58cf55110", "sighting_of_ref": "indicator--18e20ada-f9e2-4955-a279-74d9350b36d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ca7ca3-f139-4362-92fc-5c6cd3e61bcb", "sighting_of_ref": "indicator--ec9184ca-06b4-4742-bd75-4a4a298296d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102374a0-649b-45dc-9db0-9fc9bf977f7d", "sighting_of_ref": "indicator--c0ba5c47-edc3-44a5-9da1-44daf7bc2afb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e4e2c7-c249-4174-94d2-e4725b6878cb", "sighting_of_ref": "indicator--d7bb6163-809b-4d2c-aab5-5c150799b496", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92de4639-9405-43f8-876d-f6085832dea1", "sighting_of_ref": "indicator--d7bb6163-809b-4d2c-aab5-5c150799b496", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b0ed7c-2e8d-441d-a888-4aa9172d7394", "sighting_of_ref": "indicator--a8b62338-7761-4a23-8158-15a1c412914c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9306fee4-7fa1-42ba-a83d-b986974e94f7", "sighting_of_ref": "indicator--96673325-f3d6-45a0-b4ce-f67e1090fcc9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46c0c79-c59c-428e-a6c0-182aa2828d41", "sighting_of_ref": "indicator--f460c4c3-5f66-4806-81f9-4f04b09549dc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75619445-b260-45eb-b0bb-2fc9d22d2c9d", "sighting_of_ref": "indicator--6c7a9d4e-5774-41f6-b94b-43d42377e9e4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766ce9bb-5aec-4464-824d-fe7faa452644", "sighting_of_ref": "indicator--e0ab567a-0fdd-4e4b-b07c-a169b4e86496", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86bfa597-a090-460c-b66d-2c8e964684de", "sighting_of_ref": "indicator--5150dfb5-427d-4527-a591-54800ee4d6c9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e887047e-9f15-4224-a61e-16cbcb9216de", "sighting_of_ref": "indicator--b40c5ead-70b7-4ebe-80ad-b2972f0c04a8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a455d0f4-0caf-4834-b22a-39239948dd94", "sighting_of_ref": "indicator--b8793eb4-9605-4d97-9821-67838d231cc6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5a0581-8dd4-45f5-8174-595848ed8fa5", "sighting_of_ref": "indicator--b8793eb4-9605-4d97-9821-67838d231cc6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f3f3f1-c155-4053-bb3d-6700e937a5a8", "sighting_of_ref": "indicator--950e3651-8c0b-466a-9d02-0cb5aac55221", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7637c585-93ad-41f2-b961-c05229944658", "sighting_of_ref": "indicator--be99e191-b5c4-4922-a072-b4c3bd7ba3c9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112d7f79-3378-49cf-b853-f726169fe4bc", "sighting_of_ref": "indicator--4894b9c5-1282-4937-94de-c35702a74d3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87daa1bd-f274-4306-8017-4e74eb5f764f", "sighting_of_ref": "indicator--4894b9c5-1282-4937-94de-c35702a74d3d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba082df2-262b-48ea-aa2f-75edfa8de3a4", "sighting_of_ref": "indicator--4d6e5341-2107-4d36-a45c-2fa0cea77ab8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db463fd-28b4-49ed-a56c-89864427ae17", "sighting_of_ref": "indicator--a947d910-c3f0-4c41-a575-c6e95c1e58a7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e362787-3d2c-4d88-acf1-8cc938f9b141", "sighting_of_ref": "indicator--db376420-beb3-4632-9f39-3fe8d0aaa96b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d014274b-d63a-4856-a86c-9c02d8fe8d2c", "sighting_of_ref": "indicator--129779cf-cc8d-4e1b-ba4a-e7db89bf5684", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f23ba1-1162-49b1-951d-020552c90a35", "sighting_of_ref": "indicator--129779cf-cc8d-4e1b-ba4a-e7db89bf5684", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971c4a8b-3826-40f7-9412-3f0d6ea4d1a1", "sighting_of_ref": "indicator--130b492b-0218-4374-b656-106e8f7a1b62", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af1c13f-c3ca-4fda-8bfa-af90509d2b3c", "sighting_of_ref": "indicator--17737dc0-e462-49ae-9109-83908fe7d448", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8907c1-4cf2-40e2-adb8-d45dcbeccff5", "sighting_of_ref": "indicator--c839a70f-4368-4358-b69c-70ab1b2cbbcb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f6aedd-2758-47e7-afba-90676270aed0", "sighting_of_ref": "indicator--36f25ecd-7afc-4aec-b0ea-38ea44f49e55", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec4322a-49ad-4f3b-a48d-6de5e03087d9", "sighting_of_ref": "indicator--677ff844-0c3c-4193-b43d-c212ff3844e4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b89650a-c959-473e-8168-1ec6ebde53d2", "sighting_of_ref": "indicator--abd2dbb6-698d-4f2c-86fd-868a348a0d34", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da51c3c-7097-475e-a52d-7cf089694f86", "sighting_of_ref": "indicator--1b036641-22e6-47b8-bc72-12661b32e30c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7baacc0e-3871-48de-a877-71545f2a3327", "sighting_of_ref": "indicator--35cb61ee-23d3-46c2-9aeb-134425f4cdf3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecfafca-85a3-4bb4-a222-4277419673b7", "sighting_of_ref": "indicator--c1dd5787-d9b3-4900-98af-0c7426b266c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f70366b-4a7b-4e09-ac98-6b9fab7cb9e9", "sighting_of_ref": "indicator--4fee1290-d027-4cab-b09a-7707906e9fcd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6ccae8-2a60-4da4-9e2c-2faf750393e1", "sighting_of_ref": "indicator--084dabd2-9bba-4f14-8efc-b9130a00cd03", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20624fed-affb-4c48-a3b0-96f533ae3c0d", "sighting_of_ref": "indicator--5a36a3b9-ade5-4696-92cd-86b766034851", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95879677-a4a8-439a-af30-44fd5483eeb5", "sighting_of_ref": "indicator--0bd1311d-ee15-432e-8993-20aa23c1ce50", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a048e401-90ef-4ca6-8fe1-59764246053c", "sighting_of_ref": "indicator--cc4c0715-f1bd-47b7-afff-bd3c6d923e98", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc1f8d2-b1b5-4990-a891-8a6b0e205c28", "sighting_of_ref": "indicator--ca99a509-01ce-4cb6-a661-27dc8698058d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef439869-9957-4df4-b5ba-c28f5f9a1e41", "sighting_of_ref": "indicator--3884c939-4afb-42d6-a4a4-17f513ebeba8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e45528d-f72a-4aea-8145-29272f31d713", "sighting_of_ref": "indicator--8df399d2-695f-459a-9e14-86d2fcf76ee5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e47f91c-e865-4ff6-b22b-07f47f171cc1", "sighting_of_ref": "indicator--8a954a19-aecd-44e6-8acc-160456ac624f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b996cce2-b79b-40f6-98a2-a4b9510509aa", "sighting_of_ref": "indicator--44a2561d-7fe8-43e6-874c-cb423801fa08", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baaa3fdd-18d5-461c-b6e6-8bb8321b2339", "sighting_of_ref": "indicator--911b4e65-00a8-45a2-ab28-aeaf189e11f0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37affec7-7b7b-4a9c-94bb-2f62698c27b2", "sighting_of_ref": "indicator--35bc0e0f-1f33-4c93-9a60-4fe5d093c499", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e059f1e9-5142-4fe2-972a-a40703b905ce", "sighting_of_ref": "indicator--198f7501-22c6-49eb-955e-b4bbc2d67151", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b64bd1d-2b4a-480d-b702-608f5974b0a6", "sighting_of_ref": "indicator--d6f15b9f-adad-4104-86a1-00bf5f405ed6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2c637f-9ec3-4139-b9bf-a028f0ace04d", "sighting_of_ref": "indicator--0466ac2a-2a1b-4973-8524-3d29f92baa7d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b539e2e8-6ac8-4d61-9b24-1a1bd5f1a50c", "sighting_of_ref": "indicator--43005b76-afef-4e61-a188-3a65e80f4116", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041ed9fd-fe70-4202-bdf6-721021779078", "sighting_of_ref": "indicator--bc5907ca-9a0b-4a72-a98d-88806928771f", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4719f9f8-fcf2-4795-ad45-0f97160c7f05", "sighting_of_ref": "indicator--4f13dbba-0e89-4450-9c8d-7f426c03bb31", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1398da37-ef09-4af0-8c49-cb3b83739b24", "sighting_of_ref": "indicator--1cfb2727-2362-46ea-8066-908c7b71c619", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c16473-e591-4113-9761-7ecaca1729a4", "sighting_of_ref": "indicator--3c5a39a4-0675-4d26-823f-065158cd4959", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9d123d-6e8a-481f-b54f-92510f0558f0", "sighting_of_ref": "indicator--5b84c20d-097e-41bf-b493-f8ed452d11c3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0630fbbd-3c47-404a-b4df-9ba7a7da77d8", "sighting_of_ref": "indicator--84b96d29-c4a0-4b4a-b1d0-61c2d23a3b81", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a40a987-d4a0-4243-866b-f4ee134c584a", "sighting_of_ref": "indicator--1acac9fa-ce55-45a9-89d7-0567c04b670a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b2b425-9040-4de6-915b-0b9df37d53db", "sighting_of_ref": "indicator--854a171a-c643-4cdb-a070-9e6c5b8072b7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30275471-ff9f-4463-938c-4a8fc5c144be", "sighting_of_ref": "indicator--3ddd4189-2180-471a-95a0-2ac5d777c7b8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4ccc1c-5137-4da4-af49-36f72b797a90", "sighting_of_ref": "indicator--3a816a13-57c5-48ef-94ee-93e3f27f5051", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e628ce25-d15f-4a16-8294-0753f6a20752", "sighting_of_ref": "indicator--f9e5efd7-745f-428a-b743-7028b43245b4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e79ea7a-4c19-4ce0-9a39-4a7bc547ea8e", "sighting_of_ref": "indicator--e321972f-86d0-4637-aeba-806ec1bb3503", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489c26c1-109e-43de-a99f-d989c88eafdc", "sighting_of_ref": "indicator--7228c503-5558-4c95-9f15-ea0323f47880", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c083ffd2-31b2-47b2-b4c3-9b098032e80f", "sighting_of_ref": "indicator--94c914b6-b441-41df-9424-9cb97ac3fbfd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be227990-5277-4641-b681-f153bb415fc2", "sighting_of_ref": "indicator--5fa5b4be-63e1-4109-b251-e8b22f2e9108", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09f69a9-96d4-4863-ac16-9e1cab13edeb", "sighting_of_ref": "indicator--a3f3abf4-3340-4f2d-8dd5-d35f4ebc88bc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56409b3-9073-4c95-ae86-b5506bd5db7f", "sighting_of_ref": "indicator--3a4f351a-9f03-4ef4-bb4e-4c98623bb517", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb38e69-cffe-4294-a0fc-2c7279c05b56", "sighting_of_ref": "indicator--998f99e1-7ff2-428e-b88b-02e1625b6f4d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b307c259-9d6f-46d0-a220-f41601503eb9", "sighting_of_ref": "indicator--7d8299f7-c3c0-40eb-b0cb-5bd89e273dae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088a3c73-051b-471a-b0b2-4cfa9cfc5381", "sighting_of_ref": "indicator--fe2b8bd3-280e-44c4-bd77-ceda45a2577d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be70ef0-edfa-48ff-a4fe-ce64a45757b9", "sighting_of_ref": "indicator--900472f3-f2e2-464d-b841-cc1a2958a27f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f328e3a4-a6d9-4246-a728-52bd1949e02a", "sighting_of_ref": "indicator--789a63cc-f17e-4df2-a216-066cb90fcdcc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b138f0-f7b2-4f2c-92a4-f04c4073c693", "sighting_of_ref": "indicator--f4cc84c1-6380-4215-bdc8-8d7425b27066", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5809d8fe-3d90-4867-b31a-1f7abc05bc7a", "sighting_of_ref": "indicator--350f8faf-0a96-4aac-8183-a1fc8830ca4c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cee3d15-ecae-4777-986b-b90c1f7e2a01", "sighting_of_ref": "indicator--2059f2a6-d4b1-48dc-81e1-180eed50a8e7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5319d51e-0444-409a-b171-6a3511eb2e32", "sighting_of_ref": "indicator--699572b8-305a-41d7-9b3b-51219e0ec4bc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db689768-177d-464c-aea0-1f8017443711", "sighting_of_ref": "indicator--0c9f509b-eea8-45d7-8ece-c91e59ef7d26", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c0d8ef-30a3-4497-889e-da18f2c65648", "sighting_of_ref": "indicator--a9b78004-9e97-4f3d-abe3-a17ef6cd74e8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c536bdcc-be21-404a-84b6-0c8cd7c07ef9", "sighting_of_ref": "indicator--f72d1faf-f0a1-460c-ae96-a0138a47db97", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff67ad4f-e934-4e2d-b5bd-b60d04c85f9c", "sighting_of_ref": "indicator--362a043d-b14d-41f4-aa03-0db32acd0101", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e6380f-dce3-48c5-b032-38181c88654a", "sighting_of_ref": "indicator--675ad762-e5a2-486c-b7af-e1ea19c8666f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b86145-b873-4ced-9eee-0c1a18f0e1bd", "sighting_of_ref": "indicator--00f0796a-8a06-4e08-ac7e-245f8b2d0937", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11051a6a-280e-48bd-b3cc-e38ea12eb514", "sighting_of_ref": "indicator--4ba4a15a-9bf9-456f-81e3-f98897c14b75", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e147d1a-8d66-4f48-8260-e7bf3495f6e6", "sighting_of_ref": "indicator--cb70f293-bcfc-4107-96f8-1ed0bf5fa004", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb50ff50-d5eb-428d-87f6-0cb0cd8a6609", "sighting_of_ref": "indicator--a1feddbe-4bc5-4322-bf8c-1ba17c76f572", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed78c193-d49d-436d-bda8-8a474bf2909e", "sighting_of_ref": "indicator--43ce41d1-116b-492d-8aa8-309557894d59", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb596f3-1d6c-44cb-9471-703beea696f0", "sighting_of_ref": "indicator--95176b95-f424-4742-97d8-44b82e16f12b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe71aed-bdee-41b6-81f7-4a30791ec689", "sighting_of_ref": "indicator--bdf0c86b-0986-4198-ba9f-819043aaa381", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a441276-65a5-43ae-9fe3-cb34bcfae679", "sighting_of_ref": "indicator--e19c1a0e-0994-4faa-a7d3-79cf272f5856", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bedf2de-47f5-485a-b1ca-3efbac3192cb", "sighting_of_ref": "indicator--9e219e05-c6ba-440b-9446-69c6edf6efef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734331ad-3533-43f0-a1e1-2a5e2bf5edcc", "sighting_of_ref": "indicator--fac106f4-493c-488e-9eaa-8a4b08038d6c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f95e95-21ae-4c57-a913-d8da8c38cb78", "sighting_of_ref": "indicator--a86053cb-79c4-4106-b6dc-6e89a3647844", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b363a88a-0099-4540-991c-611a8273e05d", "sighting_of_ref": "indicator--58e942e0-3953-4425-899b-b047b30ccd6f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8265b5-bce7-424a-a092-3ba161119995", "sighting_of_ref": "indicator--27c2018e-80fa-4bf6-a450-f06ff8e2dcba", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3ecb2f-5c58-46c3-ab94-5f8d5761f5cf", "sighting_of_ref": "indicator--9172c133-a759-4e2f-99b3-03b1a7cf114a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2290d13e-0431-4ee8-9efd-5f0952dd40ea", "sighting_of_ref": "indicator--88e73adb-c2b7-4495-9989-77aa2043be58", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f40383-622b-4cad-a6e9-1c2d8ab566c9", "sighting_of_ref": "indicator--3c12a7b1-c756-4740-8389-d034d57f3ff8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83ddadb-a1c8-4ff6-b0e8-2698c6af2df6", "sighting_of_ref": "indicator--560386e2-283e-48f0-a9ef-f17267df8332", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a83c37-2128-40a0-a003-f6f1bc02bcac", "sighting_of_ref": "indicator--560386e2-283e-48f0-a9ef-f17267df8332", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d6dbe0-67ce-4f6c-bfec-340cc4540b46", "sighting_of_ref": "indicator--560386e2-283e-48f0-a9ef-f17267df8332", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212165ae-70fa-448e-919a-54e2dd89b7d7", "sighting_of_ref": "indicator--903e8a95-85f9-4ee9-80dd-5e7d5edf9578", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485ed2be-bd7c-40e9-85c2-3f38a52b9b62", "sighting_of_ref": "indicator--903e8a95-85f9-4ee9-80dd-5e7d5edf9578", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8f0112-cdcd-4de7-8792-f2d1e0fd5e62", "sighting_of_ref": "indicator--903e8a95-85f9-4ee9-80dd-5e7d5edf9578", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373cbd9a-4601-4fab-8307-a37c576026c5", "sighting_of_ref": "indicator--25699f7a-acc6-4419-a57d-d7d3b902ae41", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bd8eea-407d-4419-a79b-f27a4fdf6d82", "sighting_of_ref": "indicator--f05db71a-a8de-4ce6-8681-558d0d7be96b", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d79ca9-996f-4e6c-a06a-dd3fd8c3224f", "sighting_of_ref": "indicator--003d7a31-af1e-4eb7-b97a-944b90d55196", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6512092e-1fbb-4849-9fa2-020d946e9568", "sighting_of_ref": "indicator--3086b247-9b41-411b-b2ec-d8db7e950967", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc76ca6-8f4a-4dc1-9d4f-f6fd6b18ff1e", "sighting_of_ref": "indicator--88fe241d-9dfe-4706-88b6-d603fa816053", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b392a98-0511-45ca-a116-75b257581b8c", "sighting_of_ref": "indicator--b6a3beca-6eda-4a0a-a393-6cf2572456f1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f6a503-d4b0-41d7-b7da-b3d63f84b8b2", "sighting_of_ref": "indicator--d912328a-d725-41dd-833a-1c90af152433", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1035827c-66a5-4cc9-9fe2-747111ab6c12", "sighting_of_ref": "indicator--69857c85-7886-43c1-89d0-878680919c49", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a9fedf-8617-4702-a16b-dcc2a6c79950", "sighting_of_ref": "indicator--bcc0f90c-856a-4523-a957-48cc94e63c32", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085ddeed-7ae1-400b-bc80-a426c461f59d", "sighting_of_ref": "indicator--cc7fb9da-787b-4aeb-ad12-33da4611664a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b43a36-ef19-4a49-9ea2-ea74271ab231", "sighting_of_ref": "indicator--fa44f493-c43f-440c-8bae-1f33aaccc74b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0991da-cfc4-40e6-9061-506ce21ed3ab", "sighting_of_ref": "indicator--8b55e9a3-e84b-45fa-9874-755a4f9cc648", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210e4af5-b113-4d8f-af0b-1631f54db464", "sighting_of_ref": "indicator--ccd2be39-63ab-4ce8-8c3d-155aeded428a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38211507-5842-4ae1-b5a6-d33076821840", "sighting_of_ref": "indicator--e6577d94-3996-495e-b220-842786472cb0", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b4c166-bacc-4cf6-ae82-3049dfaf1581", "sighting_of_ref": "indicator--d76cd727-e4ff-45ce-bbe7-91f83fc29b8e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58640a5-062d-4019-b989-b1611ce7fc3c", "sighting_of_ref": "indicator--3d793e7f-30c1-42f2-a4c4-f06ed4f1e3a1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15e7581-9cd4-4ad5-8cff-034c93a22f48", "sighting_of_ref": "indicator--077ea86f-8308-454f-8ffa-d8a14ef0db7d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f570d0d-e1d0-4887-aeaa-8aa60977811d", "sighting_of_ref": "indicator--c1c2d5c0-3e80-43c9-8b13-d2eae4cb8d8c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e270896-c720-4c23-a9f5-b2a2cdd6a053", "sighting_of_ref": "indicator--f8771371-bea2-4964-82ff-0fa679b9485c", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc4e9be-fc37-4a85-a6b7-bd126bf248e5", "sighting_of_ref": "indicator--2f09a684-321c-48c7-b8ea-0e9565c6393a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab29905-15d7-4ad2-a1e2-28d09f9b8938", "sighting_of_ref": "indicator--a2ad8ac7-78a8-445f-b840-b57a89322304", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6093652c-7228-4872-b54a-caf8a9535a98", "sighting_of_ref": "indicator--a55f387d-7d1f-45be-9484-704d2682726f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab85dddb-7d8f-4baf-b32d-b169c68536ac", "sighting_of_ref": "indicator--d3a9d88a-8df5-4528-b497-88d9ac8a31e7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54f4781-a9a7-4c4e-836d-5d1341cb1bc3", "sighting_of_ref": "indicator--379d8b1a-2109-47e0-b071-1554661678d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa1f88b-c4a1-4141-bcfa-43c106ed80ba", "sighting_of_ref": "indicator--588129e8-9b26-497c-a93e-d1b90efedda9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b7f439-f766-4954-b70b-43764abe7233", "sighting_of_ref": "indicator--38fd40f6-b5af-441a-a5c3-29838894520b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ed0788-ab22-4ef6-9541-5f0c61daed64", "sighting_of_ref": "indicator--c6cc4ce4-a89d-488a-a34b-d077a4cea4ca", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa5998e-eacf-4f6f-ac0b-e8d0e5eeed66", "sighting_of_ref": "indicator--a8685617-f0a9-4067-99e8-8eb507885ed4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc017d5-7f0c-4419-9e82-a7f86986aafd", "sighting_of_ref": "indicator--cac5f327-9001-47df-b1e8-eace7b2d2f36", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1139a6-2933-4745-ab99-294d8e33335c", "sighting_of_ref": "indicator--d822dac7-4f95-4e14-ae13-a2fda4547b28", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b41001-adc1-4803-aceb-a22eadb2a400", "sighting_of_ref": "indicator--acced0e8-53ec-4dca-9677-57d0f15ec27a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dad0365-74e1-4fd3-a866-b4a9c4868de9", "sighting_of_ref": "indicator--0c7206c4-3859-433c-bf71-b3df41e605b8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7ea910-be76-46a3-ab3c-cd4298fe855f", "sighting_of_ref": "indicator--346e91f9-f56a-4d29-8cad-f4edc0d2cd16", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d071c922-0f2d-4fec-81ff-b0913bab867c", "sighting_of_ref": "indicator--a7cb599d-bdeb-4e6b-96c6-09a60a9b77b6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9505fcf0-a5c4-45c1-a446-95ea80cb1f8e", "sighting_of_ref": "indicator--598b144c-35ba-4162-9ee2-d76849bed6b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a8e3f2-07a4-48c1-aeeb-f643e0f3cda7", "sighting_of_ref": "indicator--5c190b87-e1d2-4286-b7cc-3241ed03da68", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5cdfe3-3187-49a2-b45e-414cd287326f", "sighting_of_ref": "indicator--f5c00605-af3f-4e9b-bff9-925f54e31f75", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16b1b24-3d6b-4511-8e84-adc8288fd285", "sighting_of_ref": "indicator--d34f7301-2884-470f-9064-0336b6a5d6d3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485ffbbf-3246-47e2-a35f-503bc04468e7", "sighting_of_ref": "indicator--dc95b330-6aa6-41f1-8b76-82f8168b41b7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497f8739-f8a8-4809-9a89-babbe0f72439", "sighting_of_ref": "indicator--f6908cb6-4ea5-475a-bd38-d36d9c53ecc4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0a8ab9-1d3e-4489-9e33-f6835f9b76ff", "sighting_of_ref": "indicator--f58a26a3-4e9d-4018-8e91-f4b03a6c8261", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d39afa-29c6-4836-bfbf-958cdc4ad3fe", "sighting_of_ref": "indicator--27b464eb-5dd2-4650-9e2e-75a19965a52a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc09d5f6-c365-4463-a348-8b8bda9a0128", "sighting_of_ref": "indicator--8c2cf527-9d96-415e-8278-a4b36bbebcd5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a107fe-21fa-4d36-8ab6-03925abddb86", "sighting_of_ref": "indicator--d6e9eb9a-d0bf-4946-96bf-97183aa57c48", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22eae79-5e28-4a58-bf7c-ac6dc1af9ac8", "sighting_of_ref": "indicator--d86b958b-2ea0-4fc3-817d-6a9c84b5fb0f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb3b8ca-229e-42cf-86f0-1236bcd3d35e", "sighting_of_ref": "indicator--0cfe2fc7-d1da-40c0-a64f-569789505531", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a257ead0-8997-481a-971d-f92324b75dee", "sighting_of_ref": "indicator--1d125ff9-ecfb-4375-a607-682895f2b5b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1e2490-b201-4647-895b-268c30c60c42", "sighting_of_ref": "indicator--20126e6f-a31d-415e-ab79-dd5060bec2f8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd57d6e6-7e02-42f0-932a-b59ee92360f3", "sighting_of_ref": "indicator--d65f5f66-8f66-43f6-9168-9e490034511a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3b9514-6749-4cb3-ab93-167026ba0792", "sighting_of_ref": "indicator--52a12afd-c066-4603-9f6d-7e13fee170d5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d38309-ca89-4c2a-9666-2a41ed55a0ff", "sighting_of_ref": "indicator--0052282d-20d8-4dda-8988-f3ec74d932de", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5984ae-e146-4e25-adc0-5b73ba6f9dbf", "sighting_of_ref": "indicator--d0bef29c-70f9-4f2c-9be2-eff9a8d741a7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c779783d-50eb-4c24-86bb-a4d4df776483", "sighting_of_ref": "indicator--31962229-79bc-46e2-9878-a9127a8b7516", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0beb59e-c327-4a78-9f26-9b27ef81571f", "sighting_of_ref": "indicator--6d84ab53-5fb9-40be-937e-f153780c0d4f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8581e4d-5fe7-4884-9d29-edd28b2ca623", "sighting_of_ref": "indicator--17ffa3e0-8140-4cb0-8715-a416f3cee4c3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08edf67-30b4-41f3-908a-0e0ebe326aad", "sighting_of_ref": "indicator--8b757201-3db9-4f2d-90a3-67d079785893", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824d5ce8-3f8b-46c7-84e8-a1e7ac87d4c9", "sighting_of_ref": "indicator--31584751-0dc2-4a2c-a343-27052ead59d3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6050db1-55eb-4d03-a53f-fbf24545f7cd", "sighting_of_ref": "indicator--8f856c2f-1570-44db-a982-e7097c76b87c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8ef48b-721b-46f5-b6bb-57fe27882a0d", "sighting_of_ref": "indicator--826ddb27-1976-427f-b693-5be4067ff3e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7047d55-86fa-441d-90a5-609d62c4d763", "sighting_of_ref": "indicator--6ee72bba-e9f0-4723-b217-e17cca2f5cfc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa33e38a-09e6-4283-9902-a03e74f28658", "sighting_of_ref": "indicator--1afd82a3-3b8e-49e6-bc9c-480531809347", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a89547d-4c54-4e7f-8be7-a8a20d52825c", "sighting_of_ref": "indicator--79780265-e840-4569-9a54-b748cde8bd31", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8564fe-d971-4fc0-be43-93f594fffffa", "sighting_of_ref": "indicator--ea28b463-5574-47a9-8396-9e9c23cbec95", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d6d7d0-7ce6-42ed-8e96-d6bd3b403b41", "sighting_of_ref": "indicator--208152de-8fcf-4948-80e6-b591f19d0dfe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9f1b34-8a7d-4523-92ee-b0f436496b82", "sighting_of_ref": "indicator--77988f4e-a18a-4c1a-ac5c-06c5194d8158", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72cde74-197e-4bc7-8180-6f1af353bc7c", "sighting_of_ref": "indicator--24ffeee5-3212-43ae-92d6-12e4a62c6ff1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad67863-c053-4d58-a7da-450d8cc7ee6d", "sighting_of_ref": "indicator--e2a1bb7f-299c-4cd4-a956-2902d3ed3a86", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222d5383-0bf5-4a8c-b4b0-3e8c373eac27", "sighting_of_ref": "indicator--2bb0adab-c571-4926-a6f8-a8e1c6c30f0f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6feab756-bd91-46ca-9f5c-4af41a9e4e8d", "sighting_of_ref": "indicator--e0c46c20-e3ff-42fd-a6bf-6db044963f50", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb28c13-a58a-4947-affc-99657b6c69a6", "sighting_of_ref": "indicator--2d4c653f-9709-4e8d-8174-0516db09e6e7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36009453-c2ee-4a69-99fd-06a16f6bd7a7", "sighting_of_ref": "indicator--2f2e5835-da7a-41b6-9979-0672425770a5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb8813f-0f26-4c86-83e8-2585aae04cf3", "sighting_of_ref": "indicator--9cda27ff-5a76-4045-b9f3-c7517cf527e2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f2a040-fc1e-445f-b37c-2b6f8450cdea", "sighting_of_ref": "indicator--580745d0-bca5-4189-85c9-be42a186416b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3051707b-1de8-4b29-b568-01f4ac8517cf", "sighting_of_ref": "indicator--e1b511da-7f0f-4067-95b4-e383cb6a5924", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2d1988-913a-4326-acc1-a73a5c9843ca", "sighting_of_ref": "indicator--46437c31-e0ef-4016-9d9f-956ef9095d35", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a213117-cfdc-4b5f-b299-6d2bf6f0706b", "sighting_of_ref": "indicator--820f39e9-9544-4c7c-aa70-3dd74b38a5f7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aebb27c-2f6b-47a1-9931-e459fb75911a", "sighting_of_ref": "indicator--63d37786-98c3-4796-848e-947d105ea86a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c411697e-4cbd-40c0-93b3-234b7270873c", "sighting_of_ref": "indicator--d66295bf-6740-4a05-bda5-4e5d2410916d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ee16b7-b0a0-49fa-ae3b-2d4351f928c4", "sighting_of_ref": "indicator--2f22e288-06a5-44c2-ad01-30dec2733669", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4316aefd-7cd3-4554-8872-d3e70b3a4639", "sighting_of_ref": "indicator--f4d8c15e-1b69-4426-bc9b-5480441ea9d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded9fc93-b492-4c50-a471-3d4114fa82d3", "sighting_of_ref": "indicator--a485506d-320a-42c7-ac83-657f089fd499", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7c1dbe-524e-4afb-a1c7-292dac27fb6d", "sighting_of_ref": "indicator--674d586e-44a2-42c9-8756-432af0454aae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9ee2c9-5762-4c3d-8146-1cf8eb50f03d", "sighting_of_ref": "indicator--387f3572-16b1-4e68-83bc-f7b9cee03917", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b17a18e-db01-4032-adb7-d3c657e2d814", "sighting_of_ref": "indicator--4ac45c41-12fd-46c0-a6c6-dd7e84454e21", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20234f9-3d3e-4eca-8c33-62cfc095a105", "sighting_of_ref": "indicator--9f4621a5-7b6c-4330-b8fe-0957cc598a9c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f9624a-833a-4a28-92db-a6ae82f9bece", "sighting_of_ref": "indicator--413dc46a-998d-4d56-81dc-a5e9a9575868", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65657be-0dca-4e96-badc-fcfb299be47e", "sighting_of_ref": "indicator--97a0457a-6e84-4883-b683-d11962751fbb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbda0ad-698b-4f22-afec-37dde8f36e74", "sighting_of_ref": "indicator--06e279ae-a7c7-4793-90eb-bea5be3f0e76", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5162550d-0457-49c0-88f7-f46d027b054f", "sighting_of_ref": "indicator--91346842-8e02-4dbe-be0a-683f7e84aaf1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ea125a-d936-428c-aaf9-c5cccf55f54b", "sighting_of_ref": "indicator--ad59ae28-b764-4435-9bdc-da56f0cabf4c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0637f5a0-f477-4b1b-9082-57d0b7ab497c", "sighting_of_ref": "indicator--674e8824-7e44-41f2-ba3f-c0d36df800d5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc21994f-b60a-4487-a03c-a3d17cbcdfe6", "sighting_of_ref": "indicator--cd2403fe-008e-44f5-a2c3-9186b77b81af", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2faabe-146f-4c76-8ddd-303aceb080b6", "sighting_of_ref": "indicator--60b40fed-f22f-4d0f-bd97-824ca6548042", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8db09ae-503b-40b8-8179-91f57fa2a8a2", "sighting_of_ref": "indicator--32ad5ec1-ba56-4e46-97ef-a9a96af1776a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4551a4-21ae-4813-acea-be4feeaf0806", "sighting_of_ref": "indicator--c961f64e-f9be-48ab-a385-33cf0610deb0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cf1d7f-0ca0-4df3-96ae-c6fa4814c07e", "sighting_of_ref": "indicator--5f956eeb-1139-460d-8920-4925227ec74e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe50fc3-b853-44e9-a152-ad7d52a6c7ed", "sighting_of_ref": "indicator--cd93d3c0-da3f-4357-bb90-06c37aa4a5bd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b82611-4c10-4afe-9c51-30a08ff19821", "sighting_of_ref": "indicator--05749d47-e569-40b7-94c1-e98a71468de2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1624ac62-0a89-4186-aba0-f21455617bb4", "sighting_of_ref": "indicator--36037253-fe72-4554-8680-bebe4c3dfb6a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5343a5-1c77-4ec5-a5fa-bf735c440e31", "sighting_of_ref": "indicator--6bbd3a4c-fd2c-48f4-9c2b-473d78b8d6a8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3a1f16-f900-4185-a3b9-91ec4febe020", "sighting_of_ref": "indicator--c0bd8f1b-67d0-46f3-9867-c1d955476280", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70fad0f-b320-4232-b2a9-3295dc2a0012", "sighting_of_ref": "indicator--3796becf-1f57-457a-9f70-b01287c9919a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254b0c22-0592-4ea5-b85d-d1720edbcf72", "sighting_of_ref": "indicator--ad31c6fd-8663-4f70-8260-9e2266f7a842", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f83d8d-c454-4dec-890e-78508bcdc94e", "sighting_of_ref": "indicator--76836ec9-b57e-4e9d-98da-b3dc70f87369", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbd9310-3d82-4798-97cb-f719c0a7f456", "sighting_of_ref": "indicator--c38e6ea7-5538-40ad-9c6c-68b9d86186b6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980ee439-cac1-41c6-8052-1e65b48703cf", "sighting_of_ref": "indicator--87a7d6a0-530c-45e9-8407-613a8f08cf8f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1092b6-9fa5-4909-9163-34571080a906", "sighting_of_ref": "indicator--2bb4bb94-b4d0-4224-93ed-8aef5f06f2b1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c8b122-0fdd-4834-905e-144b440f50dd", "sighting_of_ref": "indicator--eef5f1ea-a07a-463c-9c7b-aec482c6eb61", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c02c3c3-b1e4-43da-a81c-57c47472c064", "sighting_of_ref": "indicator--3dd7e9e5-ac88-45f5-873c-100e00ebd929", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9798a1bb-d071-4e75-9bbc-c46db0192484", "sighting_of_ref": "indicator--218673f4-bf11-43f3-a263-d1cf10a13ed0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba15b2b7-773b-4bf0-862d-d31663bae320", "sighting_of_ref": "indicator--1f66af33-1fe3-4ff8-9a7e-2d8dacf94ad7", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809f3632-1d8c-4f8c-af7f-a9ebc5420fe7", "sighting_of_ref": "indicator--c7ac9c3e-0da2-449d-be8d-3d34ff1c4be8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d7e510-8b56-4c02-89d0-cbc8435bd93d", "sighting_of_ref": "indicator--8e9f0c14-e933-435e-975f-f9d58d004767", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34fa84d-5313-410f-8f9e-d1f7177b34c2", "sighting_of_ref": "indicator--7f129d5b-69c2-4183-bf0d-4ae52e03ab60", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17056e3c-3e45-4962-85cf-6bf222e118d0", "sighting_of_ref": "indicator--19182d28-95f4-4d42-b294-1e39d53038ca", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5a4b89-ef8c-407c-b1f1-17ce1ac09fde", "sighting_of_ref": "indicator--40a2982f-2413-4b5c-b439-1119c502d106", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764ed24d-2a08-4ea9-a54c-1d2ed5f16b58", "sighting_of_ref": "indicator--e881d129-5787-4ee5-9c01-0492a4d4972a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5c1a9d-a089-460c-a616-d3257e0990ce", "sighting_of_ref": "indicator--73c4fa49-2f07-4f78-a0c7-eacadcb7f05c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5060ec0f-8eb1-41bf-8e90-e987fc14d432", "sighting_of_ref": "indicator--a8779aec-37be-47da-90a5-8993cb514054", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97d7f9c-51dd-4653-9bac-effadbcd0abf", "sighting_of_ref": "indicator--f54350da-f180-4c08-bd82-02893c24bda8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc0bcd8-58dd-460a-a215-414ff3508546", "sighting_of_ref": "indicator--812e6112-24f1-4243-a767-4ae58d70dd2b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fb796b-58ff-4d26-9888-e1e0133aeb96", "sighting_of_ref": "indicator--fff0d0b8-a22c-4276-9a99-fb8b05cbf7ea", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f40d47c-6454-4850-b28a-4127988640ef", "sighting_of_ref": "indicator--f1575199-6e60-472b-a9d5-f472c146ba22", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073dfa2f-98e1-4cd9-b1ed-b39ce3712d1e", "sighting_of_ref": "indicator--62fddfaf-c81d-49ef-9468-47115e1c6979", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92adf5a-1456-4a36-bf58-50d6eca79019", "sighting_of_ref": "indicator--6290681f-3a04-44b9-ab09-0646c7baa23c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971dafe6-a102-4e22-8d81-397349dea110", "sighting_of_ref": "indicator--9f877d7f-acf4-4218-b695-730180760789", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907d2cfe-babe-40b0-a72b-9ae6d57be5ca", "sighting_of_ref": "indicator--e9c8be76-38b8-494c-b493-eaa6389852a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360ccf07-6899-412d-95ed-5a64fb06d6d9", "sighting_of_ref": "indicator--fca49c31-1a40-4247-98dd-945c7cc4c997", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd23310-cef2-4840-a44f-2396d2526afe", "sighting_of_ref": "indicator--8e9a21b1-9398-42fb-8da3-b29d5a073389", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36fb29e-9cd0-4b09-ad1e-eaa7476eca5f", "sighting_of_ref": "indicator--26de2082-fb47-42da-a1b6-9fb2f7da9f97", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08809d48-9580-4c8c-b8a3-821317a0578e", "sighting_of_ref": "indicator--8d8a6936-9ab0-44a9-b5b0-d98f87f20a44", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e22d8bd-f230-4d8b-a4e6-da87e2642958", "sighting_of_ref": "indicator--e9617c09-5590-48d1-be70-afefa3048308", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a352676e-e3ce-4fe2-b795-8b05444ec773", "sighting_of_ref": "indicator--1b8ad770-3013-4de3-a710-57cfb78f437f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c11884-aa72-4995-b606-331ae01d19c1", "sighting_of_ref": "indicator--9b5f1e1f-f91a-4316-a65b-39f71cb3ed46", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80bb40a-3743-409a-9037-a05de568e331", "sighting_of_ref": "indicator--0b71b20f-38e8-462a-a122-eb4a12bbcba2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1d6629-19c2-4608-8434-c6e2e7a24d46", "sighting_of_ref": "indicator--3e3a2c7f-9c1a-41ea-86cc-c9280ce07276", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19da5d7e-eef6-42b9-9797-4a8a6873f197", "sighting_of_ref": "indicator--32c7b708-34a4-493d-8a86-89a0d9a5a8a5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82a8a6d-42d3-464e-914e-46adda718189", "sighting_of_ref": "indicator--7da8069d-4ac8-4143-b3d7-e5cf8ace8288", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c9c543-1e0d-464e-bdd1-fc48910193fd", "sighting_of_ref": "indicator--0ac3091e-0ac2-4110-949e-b2fb5577c510", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a74cd54-ed21-4efd-82c1-2a745d420896", "sighting_of_ref": "indicator--f58c7530-8deb-4330-80fe-96e5e16ed157", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc2ca42-564e-4ed1-9585-2c2fa1e0afe4", "sighting_of_ref": "indicator--55ccdbc2-ab29-4ccb-a5d6-e6a4b162cba3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a32c5f-8c0d-4f40-a4c4-16be27bc7fb5", "sighting_of_ref": "indicator--864ac791-57dc-4f97-8532-9aea32a157eb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed50167-7269-45e7-aca0-51073b1b362d", "sighting_of_ref": "indicator--ed1ef793-04b2-43e0-8ce5-22714d15c71a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7dbe39-a37d-4160-91b2-18dafc8d109a", "sighting_of_ref": "indicator--7b2a2561-607b-4a4c-a7c8-0f33356d9e13", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7a6352-78ed-4b4d-8b11-b069621a0334", "sighting_of_ref": "indicator--109fb8ca-7532-4894-b81a-09930a806b59", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc45897b-8557-4273-9a6c-2038cfc3e243", "sighting_of_ref": "indicator--eb357004-aec6-4442-ab9d-2daafeefd8e1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01700522-f567-49be-bed3-2eda2db195bc", "sighting_of_ref": "indicator--44fa6968-78ec-4410-9ee8-14f3b9fd97d5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c00f18-ac92-4f45-858f-9aa2e49719e5", "sighting_of_ref": "indicator--af640e62-a450-48f1-8623-663c63108828", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f464d03a-18df-4ff4-b88e-b29a97da999a", "sighting_of_ref": "indicator--daf69792-8a51-48e5-9dce-fb85231056b2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54923a57-8617-42b0-9ceb-226d277ba12b", "sighting_of_ref": "indicator--798a124d-ff6e-4989-b128-1aeb290b15ad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e7baf3-b382-4b02-b34b-f47a83a20dbe", "sighting_of_ref": "indicator--39eb4c0c-e601-4767-98ee-5028f384f707", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffcbdb5c-32af-4d5a-b0c0-e935da81add6", "sighting_of_ref": "indicator--ddfe798d-e3f6-434e-af2f-beaede0d96ef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61722e4f-b4b6-45ff-8d58-072771e734a5", "sighting_of_ref": "indicator--16a9a741-d8ff-4ab7-8ae0-eb553f31da80", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e521734-01e0-4e05-9c7f-549f028d30eb", "sighting_of_ref": "indicator--a7e4fd80-0fc6-4918-9dfa-f910590812c5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281da273-7d71-4feb-94c2-4fb68bb86c52", "sighting_of_ref": "indicator--c37fa43b-f05b-480c-a6f1-780883c89350", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04681d1c-11da-4702-a2fe-eba07c1dfa1d", "sighting_of_ref": "indicator--1f65c013-3adf-441a-9992-6122bb5c291b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84087bbb-21c7-4389-84d1-758f5087927e", "sighting_of_ref": "indicator--a0e86bd0-f7ee-4515-b19b-95a9f11b5fab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0851f3-2004-4003-b575-c847ef060d3f", "sighting_of_ref": "indicator--95bde830-ebd4-4bf8-bf36-7aaaf5a422ee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28386cdf-2891-47fa-832f-e4bfc1003731", "sighting_of_ref": "indicator--5888d00e-0c50-4b0b-bff4-ba595e623076", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fa013b-db5c-45af-a42c-5b3d15272c2f", "sighting_of_ref": "indicator--cfd27666-9ea8-40ef-86a4-df53306aa694", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02a74c8-7367-41ca-ab7a-4998bae84df2", "sighting_of_ref": "indicator--6dbcf40b-642f-4c5a-a1b6-5ff50c8a097a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991f9ef4-b246-43d5-bb22-3670ddb770d8", "sighting_of_ref": "indicator--5eec9898-b2ae-482a-89e1-b22432cc8d59", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27eec45-384c-4b71-8a5c-8a5c2fe1a63f", "sighting_of_ref": "indicator--08dd6ad4-21a3-4fa4-be95-28242055a123", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1cb41b-e3ed-47e0-8a04-9a053b164d98", "sighting_of_ref": "indicator--129de615-391a-446a-b4b5-9ffc381744da", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1389906-ff29-468f-a045-d825b1fe4a00", "sighting_of_ref": "indicator--17a60a96-1291-43ee-bf3d-0d386ca46533", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c425de-bdd9-42c9-a07f-68399099b820", "sighting_of_ref": "indicator--c7a3b578-e806-4744-aad8-7ccfa40a8071", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4a66e3-342b-4f52-8b7f-b3576fbeb4f1", "sighting_of_ref": "indicator--11947729-0e6b-4f23-bba7-38a4a1eeb8e0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e30aa59-ff63-4c72-96d5-cac092be1c62", "sighting_of_ref": "indicator--3f2b1681-0a26-4b5e-a2ed-69926b219e35", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31af3a59-2155-4b62-bb12-4f8c6a2b160f", "sighting_of_ref": "indicator--83357ae9-0804-4b74-9a74-6863d93254cb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fde1ed7-1b8c-4fea-bfbe-78e7b2876fbb", "sighting_of_ref": "indicator--b896a166-aef8-44f6-a289-7d47c2b7841d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6529f332-bf18-4215-bebe-36add1f766f3", "sighting_of_ref": "indicator--c962ea59-da97-4882-93f8-370a43d8c57b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6e6975-d079-48f6-bee3-31e4a75da9de", "sighting_of_ref": "indicator--67e43c23-51bb-478c-999d-bd57533d60f0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec673b8-2cb9-4737-a7a6-56b398e4c98b", "sighting_of_ref": "indicator--8447630f-aeb5-4f75-8da4-756fbf89c7b7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a06485-05be-4184-9e0f-ad352ebdfa20", "sighting_of_ref": "indicator--72b15969-3d3f-4b75-8dfd-5feeea0db2f5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870de093-2b4e-4ea5-b47c-0bae54ac6c84", "sighting_of_ref": "indicator--b2948320-c8a6-41dd-8408-a3a81ac1d51e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8df63f-df86-40db-87f1-32ec15472826", "sighting_of_ref": "indicator--9cfc9f5a-ac4e-45c5-a404-6db813db56ff", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8498a17f-d17e-4df1-86b5-9395df1b0dc5", "sighting_of_ref": "indicator--a250271f-2cf2-42ad-937c-41c3fd8a44c5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923a1757-2646-4c33-b047-a0b62bf17359", "sighting_of_ref": "indicator--56512b58-fb40-420c-a4df-dde9bd31cf26", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f039448-61f8-40e9-96df-aa81ffe5e19f", "sighting_of_ref": "indicator--b221dec6-aebf-4f20-8d05-e5b5411141c4", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3810d4c-0ef8-4da0-a6df-78e16d37253c", "sighting_of_ref": "indicator--dfcc6e98-b997-4da0-be38-d7f54de2416d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e1a910-6ad7-47f3-9279-56b33105431e", "sighting_of_ref": "indicator--da46b957-b3a9-441e-b2be-7060baaf101a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d11ac13-3598-48d5-96f1-c9a6ed99b1f8", "sighting_of_ref": "indicator--3c4ce3ff-be19-41d9-9394-2eda2dca48a5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf31e68-4853-41db-9d14-c0be4860af39", "sighting_of_ref": "indicator--caefcdd9-526e-47ce-8891-9f6a7696b87b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f7beca-c9ca-4dd6-87a9-aa6f8b80d9c6", "sighting_of_ref": "indicator--cce4dd25-72fc-45a2-8c64-e020459109fe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfb7e54-b3ea-4859-86f4-1dacf4bc0c0e", "sighting_of_ref": "indicator--afcea182-a2ea-44bf-931e-3481eaf9d663", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52437bf-967f-48c4-95e1-65d37d5d94aa", "sighting_of_ref": "indicator--d2328734-9f99-423e-b1d5-405764fdb416", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad1746a-cde5-4c5f-8397-0b52730d0d93", "sighting_of_ref": "indicator--49b1848c-03a7-458b-b6e8-67df91c89e67", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a840b7-0e14-4071-80a6-3592019f0768", "sighting_of_ref": "indicator--0ac886e7-e82a-4566-9eb7-1d62e07eaefd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ab1b11-b71b-4b0a-9d64-43fea8fb6ec5", "sighting_of_ref": "indicator--3868ab75-1f88-41d5-b095-0ab498a573c5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655f2b92-9cdb-428f-9e9d-dca576a9c0a3", "sighting_of_ref": "indicator--edec7ccd-540e-408d-9112-cb04b678293c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5bfe76-5afc-4e8f-a4b1-c9207abe9876", "sighting_of_ref": "indicator--f78cae1a-3afd-4626-a540-abb2b520e3ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a7317e-9655-49e6-95eb-91b5ec36fb52", "sighting_of_ref": "indicator--f78cae1a-3afd-4626-a540-abb2b520e3ca", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9a849b-526b-46b9-87c2-658fd68046d6", "sighting_of_ref": "indicator--36706133-dc74-4f8d-b0f4-1b9c984dfb7f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884be528-8919-454e-ba4b-ec9ea6aa8880", "sighting_of_ref": "indicator--50389059-e31e-4d65-9f49-9ffc8834f5db", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6978cad1-73d2-4c05-b67f-a2ad01fe5ffa", "sighting_of_ref": "indicator--2297eedd-2f4e-4691-8355-ea2150f70937", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd792d8-4e9a-41fb-a5d4-7da921461708", "sighting_of_ref": "indicator--e2ecdced-fbf3-47df-940e-23427b45c6ea", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326ddf2d-83a3-453e-879d-abca47cac60d", "sighting_of_ref": "indicator--3e8873b0-8b4b-4818-abe3-e757c03491a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93753678-a798-4675-bf2a-78fb666e2601", "sighting_of_ref": "indicator--4e1e6a71-1a83-4ef9-a8a4-2c21a6bbec9b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d5b7a1-6090-413f-a03f-b889662e6532", "sighting_of_ref": "indicator--12ff05b1-6354-4c8f-a935-de5b8527b2a7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50feddc-c7db-4492-9563-81e65127e412", "sighting_of_ref": "indicator--6a58a3fc-ba3d-4b1b-8bc2-eec2557ba81b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bff9a59-ed26-490e-9959-bb5b00995fcc", "sighting_of_ref": "indicator--17ed3bbe-812d-44e7-86df-826e0936bc6c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af779145-0efe-4145-a13d-acbc9ca02cac", "sighting_of_ref": "indicator--821000f1-29e9-44f7-bc59-2ddb7c19c7b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56aeee3-68e0-4f58-b569-4330019bfd54", "sighting_of_ref": "indicator--eb52bcaf-9456-4aad-831b-2e4076399f3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878d7fae-e874-4d61-97ab-88090f881e46", "sighting_of_ref": "indicator--6498dbff-3848-42a2-bb9a-f7d63d1a0679", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58741443-7d07-476b-8d1b-cc5e7299684d", "sighting_of_ref": "indicator--490811e1-766e-4029-8285-706b81a44214", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9820b6e7-7984-4906-b774-8409892eca1d", "sighting_of_ref": "indicator--b3814310-15e6-4173-ac68-824f755e783f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bda395-9d51-404b-b9ee-81ed1dba723f", "sighting_of_ref": "indicator--d69d7049-a2d6-4a69-8540-3e25192dfb29", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4a04fc-281f-49eb-939b-f8a6875ad83a", "sighting_of_ref": "indicator--82430cad-e353-4a7c-8095-70add8c209fe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c39e9ea-bbdd-43d6-b279-bf9a35ed2df0", "sighting_of_ref": "indicator--4dda0d46-7ef9-4b5a-852b-cddc073fb66d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d208ef-5ad1-4fd4-ad3f-b70cbbec2a91", "sighting_of_ref": "indicator--e149943a-525a-4405-a78b-0769ffe71c54", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703cef31-cdf8-4f89-8845-b7fa475f5b2e", "sighting_of_ref": "indicator--1515d348-ac73-48c1-9a15-0ec9122981fb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f8660a-bf3f-4348-a3b9-5436b1d88286", "sighting_of_ref": "indicator--d8b536e8-ce12-4488-927a-1d2914afb202", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa80292e-1f94-46e0-b5ab-f3ee19f6878f", "sighting_of_ref": "indicator--c2175995-4330-4f26-80fd-b9fc50d602b8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc5b655-2a17-4052-b7c9-a8e5ee2d8907", "sighting_of_ref": "indicator--db6d37c3-6f7c-4d60-9644-9d9d92d887fb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cbe766-d7e8-41b7-9b0d-40991a1c2803", "sighting_of_ref": "indicator--9d90bc5b-f824-4041-a6d8-c1bb37c84004", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914a1304-2fe0-4a8d-939f-4438d5877df5", "sighting_of_ref": "indicator--aa599c7d-8f64-4b5a-b169-9a62746c17f9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec842092-323e-4b55-adc0-d7ae451cf998", "sighting_of_ref": "indicator--e5491902-f4aa-4d8b-a0e3-5944b9a23313", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a3a608-e3f6-4a4d-878b-4cf9e602bdce", "sighting_of_ref": "indicator--c076bb0f-f73a-46c5-8b9e-215f366a2454", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d33c901-4146-4fe2-9e25-73c7f803fa97", "sighting_of_ref": "indicator--962c4fab-6122-46d6-bf37-abbca52b626e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a87396d-f9b8-4cf7-9204-9be13eb42b37", "sighting_of_ref": "indicator--0b1743b1-19d9-4cbc-9739-13dd9dbd81e1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4394c188-5e48-4365-a8ed-d3a36b9090ae", "sighting_of_ref": "indicator--15e27a77-a7ec-44e4-ac15-bcb06c9335d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820400e8-0315-4849-afbe-450b80028920", "sighting_of_ref": "indicator--15e27a77-a7ec-44e4-ac15-bcb06c9335d8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d852ba39-b0dd-417c-aad6-548a07785e7d", "sighting_of_ref": "indicator--d5c2c03a-0631-4474-89b3-2a2cbb9aa706", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68956dd7-7631-49e8-a2b6-d4ca95617de6", "sighting_of_ref": "indicator--d5c2c03a-0631-4474-89b3-2a2cbb9aa706", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0233ba-6628-4fa9-ad81-4a89377e1929", "sighting_of_ref": "indicator--4373459a-dec8-4d48-9f39-9dff88853045", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436c266f-5bce-4a8a-915f-77f9ff41ebdf", "sighting_of_ref": "indicator--c6eed2cf-2510-4e61-aa22-dc128bef6484", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121fdb06-6526-4944-bd00-9f0c59079bb8", "sighting_of_ref": "indicator--3dac3d54-85a6-4140-ad52-5a66a29c3924", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671ffb8b-bd95-4d43-9fdf-28bdeb336a54", "sighting_of_ref": "indicator--74b5bd84-8865-4024-ab4d-2f07a9c92c56", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df4b171-98a9-455c-bf0a-c3c013ab8719", "sighting_of_ref": "indicator--ffe9e9a4-0f90-45cf-b534-f6ff3cfacb79", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005a655a-72a3-4139-8ddb-ff5c1f9bbad5", "sighting_of_ref": "indicator--a2966ede-9cd1-4be1-90cf-fce7987fdcd3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad9cd94-4f09-4684-975e-decefc8323c3", "sighting_of_ref": "indicator--635b46cc-2584-4136-9743-f057f79d2057", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1d1b32-2407-4162-86ce-e83080f8c091", "sighting_of_ref": "indicator--635b46cc-2584-4136-9743-f057f79d2057", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2ed961-e47b-47b4-bc28-f93eb42362b6", "sighting_of_ref": "indicator--904889a8-e96d-4cdc-8cf0-eab7ba11a95c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaaf6d20-78cb-4a11-886a-80124acd82b9", "sighting_of_ref": "indicator--4215b0de-31d4-4c03-b859-a12b046c6b04", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92a441e-f14a-4aa5-9722-27b34c166771", "sighting_of_ref": "indicator--96926fef-25ed-41f6-b690-488ad19fa5a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376ccd1a-7f2b-445f-8935-9453006b1fd2", "sighting_of_ref": "indicator--3ce16607-9fb1-45a7-89f7-dfaa4f500534", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfeebf7-a677-4a9c-be03-a6a654fcae77", "sighting_of_ref": "indicator--8d221c30-b342-49a6-882f-6f07c7f578cc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5aa6c7d-37b9-4823-b911-c41ffbeb8f3a", "sighting_of_ref": "indicator--f368b0c9-b4e6-4ba3-b28a-83677badf270", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c81a2f3-7422-44d3-b609-b87c6d456064", "sighting_of_ref": "indicator--051ed638-859a-44f6-a338-9cba1fec237b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86004256-4490-4cfc-8f12-fe312b5b395f", "sighting_of_ref": "indicator--4084e932-edec-4964-9f6b-f18cb034d532", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecc76b5-bcc3-4469-b20a-cbaa1b53154f", "sighting_of_ref": "indicator--fad886d6-c0e9-4a8c-ba92-2f8e3231d3d4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a11e27-d95f-45bc-843f-58c81eb76f84", "sighting_of_ref": "indicator--a45a6846-b6b5-407e-9372-4384a848a9e1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e0596a-61b1-4292-a5f0-4af735f8e0e0", "sighting_of_ref": "indicator--62a13ad2-684a-4371-be77-c7b799129f8a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2b1869-55ac-4cbb-8eaa-f1ed1026388a", "sighting_of_ref": "indicator--0ac4cd77-3d7d-4eff-84d0-07343c722576", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdff0923-fb90-4f44-9751-5f57d76510e1", "sighting_of_ref": "indicator--b285ba53-2bbb-4d9e-b71b-f47151517b35", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6cb1c6-d1bb-406b-b7ee-c1733c9a4deb", "sighting_of_ref": "indicator--c1afaa3e-86b7-4b59-8c3c-18c835297bef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b7e790-044a-4af0-a0a4-ed0cdfb1ab66", "sighting_of_ref": "indicator--d30339aa-c0dd-4460-b88f-82a4bfaf5bca", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06400718-0993-4555-8ce9-c489b3d58d31", "sighting_of_ref": "indicator--e35c4c3e-675c-4a10-8f6d-cde8a5ce9b2b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfab64a-d12b-440a-b1d5-c1dcf3a983ce", "sighting_of_ref": "indicator--edddde6a-4bf7-4f1f-9b00-b11db6af0ba6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8becad-94e4-4f2f-a13e-9d94d843daf5", "sighting_of_ref": "indicator--c899822f-5c19-4708-a5e3-5a623c3d2d68", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3565ff2-6291-406c-9297-5a0e5ed1aab5", "sighting_of_ref": "indicator--b0bdb32c-f7b0-47b8-bf9e-f46249861907", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0abfd3-bcee-4726-9537-7301e04c8824", "sighting_of_ref": "indicator--c5d758de-8c16-499e-8388-83a3a5b573bc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6945a752-6fcf-42ca-bd5d-eeff655e0a86", "sighting_of_ref": "indicator--2a0b7a44-0961-40d3-b126-efe13f7feab0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90b058e-ca3c-42c8-8444-c20f8b81ef25", "sighting_of_ref": "indicator--acc15437-180d-433d-be8a-6c46273c4d01", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f05bc22-24ae-45b2-91a0-fc5d56965edf", "sighting_of_ref": "indicator--ab81b49b-1afa-41d4-9c4b-d8a2d6556683", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d69e4f-5292-4149-8e9f-59300f866081", "sighting_of_ref": "indicator--adc10995-e128-495a-89c4-db7861998ee8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76f8a24-54ca-44cd-9b1f-11169f029269", "sighting_of_ref": "indicator--7f86ea31-f858-4d2f-b28e-1cd718233f3c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9285c2-f0ed-4332-9584-aaa2a7ef68a6", "sighting_of_ref": "indicator--fc68eb99-fcbd-42b8-8bb0-ed213a68929e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b96747-5c22-41b1-b36f-29321021ddaf", "sighting_of_ref": "indicator--79caef3c-05cb-4ef0-bdf4-e6fa1322a7ee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa8df61-d885-4f46-b729-773741e0712c", "sighting_of_ref": "indicator--3f0e675a-3fc6-4f67-9d62-e6883b64a9c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aba7f6b-4557-40cc-bf32-e494916d97e3", "sighting_of_ref": "indicator--3f0e675a-3fc6-4f67-9d62-e6883b64a9c8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c8e8ad-4bce-43f4-8929-295ef8280a88", "sighting_of_ref": "indicator--7e210aea-e40c-4495-9a08-42817edc02bc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc97cbd-5d1a-4aef-ac01-8a84a58d3f44", "sighting_of_ref": "indicator--14e0450b-e63a-4d80-bfca-2d12100ca843", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc30c08-f5f5-4de9-ac70-70dc5c8fddec", "sighting_of_ref": "indicator--1fadc397-0e0a-437d-b09c-d44f8bc7d19d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbb448c-5939-4b17-b88f-e279c8150bb4", "sighting_of_ref": "indicator--ed51f71f-27d1-43fd-9309-921a5dfe3cc2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294db553-dfac-4ccc-aa4f-aef3d303f580", "sighting_of_ref": "indicator--fca2a9ab-596d-4f01-9b7c-9882aac4b890", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163f387a-e9fa-455d-a7da-83664ca81350", "sighting_of_ref": "indicator--58d23470-50e7-4a24-9299-8070aa4ead78", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1b63f4-d948-49d0-ae70-e114dc0cf47a", "sighting_of_ref": "indicator--5c60eef9-e20e-4b18-a942-fb92d921186d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267a6a24-cb84-4faf-bc16-75a71f16081f", "sighting_of_ref": "indicator--1781ce2d-13bf-4e37-adfb-f2119ba70279", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a0076f-a1c5-4ef3-83bb-069df9720fc1", "sighting_of_ref": "indicator--1781ce2d-13bf-4e37-adfb-f2119ba70279", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fabefc-954d-4281-bdbb-166394bf405c", "sighting_of_ref": "indicator--91be5a0b-d340-4213-88e8-bb29a148feba", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663ece7a-91cf-4369-b2c8-bf7f0514a3b0", "sighting_of_ref": "indicator--2fc5dfc3-216d-4d96-a18a-6e3397dc7533", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1002d2a-3e45-4a54-a64e-c53783bdb928", "sighting_of_ref": "indicator--2fc5dfc3-216d-4d96-a18a-6e3397dc7533", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701e6b7b-a641-4bf6-b013-583bd83978c7", "sighting_of_ref": "indicator--16ea917e-df94-4a37-8c4a-090d5f101ad7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdde5761-2370-474c-b980-44052dd0f9cc", "sighting_of_ref": "indicator--14b19c1c-54dd-42c1-ab9f-c64ec5a2c099", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a326b77-af52-4443-94e0-10414076728e", "sighting_of_ref": "indicator--e16a2adf-89f5-4312-b4e9-9a85c58927c4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23f5129-50c1-4450-8e26-2128e5b50246", "sighting_of_ref": "indicator--f4165bab-cdd9-48b7-91a9-bfc68597a793", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8e01c6-7bf0-46f5-a25f-5d97d88985b2", "sighting_of_ref": "indicator--5e0e312a-75b3-410f-9022-c628c296df74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc14587a-9767-4405-8664-5b600d7e1b03", "sighting_of_ref": "indicator--0925604f-8884-4b40-809f-814b7ba9c192", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eade12e-0c0c-4804-9d36-5cdf045c610b", "sighting_of_ref": "indicator--06e08f63-13d7-41b2-b1e3-019434885e4d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28ff02b-f036-4ce8-b909-d43022829464", "sighting_of_ref": "indicator--baeb67fa-2580-47c2-893e-0c70b73b3160", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afc123a-2263-45d3-8f53-cb04d9213eca", "sighting_of_ref": "indicator--48fcca6a-6553-43b0-aeae-1b4b63d90a78", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f753a6de-78c0-4988-b23a-d35fa256ab30", "sighting_of_ref": "indicator--2ac87f16-cef5-487f-8075-c397f05a44d9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de9c94b-e916-4457-a4d8-31e8bb1ab4dc", "sighting_of_ref": "indicator--d3ef3a8f-08cf-4d0b-9cfc-ccd4220c9e31", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d8c652-158d-4797-9a97-b2db85963754", "sighting_of_ref": "indicator--9e1404a0-dfa3-4716-a09b-bff1852db9e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebb1f5d-c94e-4d3a-b33e-feff88a37b96", "sighting_of_ref": "indicator--9e1404a0-dfa3-4716-a09b-bff1852db9e4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aeedba2-48b2-438c-849e-970a201159e2", "sighting_of_ref": "indicator--52e333d4-c905-4704-8248-04fd69bdd84c", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b830e567-61dd-407c-80a8-2052ca6ee69d", "sighting_of_ref": "indicator--fc40ddfd-a45a-46c1-b21e-902cf546a80c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ff0336-da54-4110-b9ab-c2053c4d1a3c", "sighting_of_ref": "indicator--a326d2d0-5ab5-42da-9904-402b39344fc0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdeebe1-1035-45b5-b623-859d9188562c", "sighting_of_ref": "indicator--e0660fd3-a764-4d71-9bd3-7a5d87cfc7ed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c07996-012a-4bad-9bd5-a0c2e7a7dd82", "sighting_of_ref": "indicator--322a559b-1633-4a27-b36a-9410e5e5013a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b2799b-e87d-4236-8b79-ffb0d4f657db", "sighting_of_ref": "indicator--649c5ef9-1139-4091-8b8a-c76ffb74781e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cb3cbc-2a69-418f-82bf-8f47aee8ce9f", "sighting_of_ref": "indicator--436d53d7-3fbd-4af6-a23d-da655a1218d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb5a4c7-670f-4472-b223-6a3255a96424", "sighting_of_ref": "indicator--90c2b316-c85b-4189-9d20-f141c1cfd155", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbed708-b970-438d-9e3b-717f5f1ac2d8", "sighting_of_ref": "indicator--96589126-3931-48fc-8439-62b227ae43d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043b757a-ca79-4d61-8976-81f5067afd15", "sighting_of_ref": "indicator--965e2edc-a79b-4f7b-b4ef-7baf12692914", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86306a73-93f3-4a70-bef4-b9f0649af641", "sighting_of_ref": "indicator--4fe83970-cd2e-48d1-81ca-839b47934e03", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e575f500-a223-45ee-93b0-f1064fecff3d", "sighting_of_ref": "indicator--b6dc05cd-1997-4afb-babb-64407f213296", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428c8d1c-7f3d-4508-8ff1-de8f4c3fdfa2", "sighting_of_ref": "indicator--b874cb31-b8bb-4d95-b5f7-45ec2920b8ba", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79e3a2a-045e-4d23-bd2d-42486446c738", "sighting_of_ref": "indicator--075b9062-0a6f-48e9-ad71-65172eeb0ad0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5baff85-922d-4726-9b6a-38439cfc8361", "sighting_of_ref": "indicator--213c1efa-1601-4bcb-b8d0-a2261345085f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ccab5d-b5cc-487c-a4fe-49ec0629eb11", "sighting_of_ref": "indicator--13f2a9c2-5f9f-422b-ba9e-ad4afe663c44", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9781b8a5-ab2d-4b88-b12d-cc716371a0d2", "sighting_of_ref": "indicator--025264b2-4e50-463e-83c3-9919c0aeea18", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9a3307-9a96-454d-8d7b-2730620d257f", "sighting_of_ref": "indicator--025264b2-4e50-463e-83c3-9919c0aeea18", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69ea415-cf31-408e-88e7-c0822ece683d", "sighting_of_ref": "indicator--b7f5b268-0dde-497e-9497-3f8fe79b1956", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d173d1-448e-4970-a575-74ea74b62571", "sighting_of_ref": "indicator--bab4ac31-9789-47d2-a7c4-12cfaecc291d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88507094-acda-4dc0-a306-a1bf318f6499", "sighting_of_ref": "indicator--c4554aa8-c2be-4631-b653-4257193b1d5d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e53447-13d7-4ae0-a8b6-73c79fc5d5a2", "sighting_of_ref": "indicator--9c84376c-dc1f-480e-9048-8e3fa068b048", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4b1716-e35b-47fd-9f3a-3b63ad3b7911", "sighting_of_ref": "indicator--7a4eb622-1efc-4131-b066-91ef06dd5a05", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240d4ca6-410d-41cf-bd34-58f1454e768e", "sighting_of_ref": "indicator--6c4b1ee6-156e-4071-8513-76cd96ba0364", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f192be-04fa-48e7-9e30-8d76f45ebb44", "sighting_of_ref": "indicator--af0cc160-aa48-473f-9f44-f9aa006e5508", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47d56b4-b08e-46ae-84e1-c8d14776fb5d", "sighting_of_ref": "indicator--e5604beb-273f-4252-82de-c0c9d947ffcd", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3842a9be-73a5-444f-ae35-114c5390b9a9", "sighting_of_ref": "indicator--beed4a86-9194-4d66-ab13-edeaf04c138a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef4c4db-7878-47ce-a9ce-f82cb4177110", "sighting_of_ref": "indicator--eb476784-35e8-4751-92d2-055138b87e05", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b3908e-36cf-4089-8048-99b11c64bc1d", "sighting_of_ref": "indicator--f30ccf72-7551-49f6-91ef-b95708f278d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c8b7d2-a70d-49f9-8c45-ab060d939d8a", "sighting_of_ref": "indicator--2630ecb9-6649-4743-9079-825e6a5fdf18", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9617c1d-3fce-40d1-ba74-00e2379fd8a4", "sighting_of_ref": "indicator--04c48a67-58b1-4308-a21b-30c737eced96", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d9122f-4c3e-41bd-944f-b02ac4b4b782", "sighting_of_ref": "indicator--04c48a67-58b1-4308-a21b-30c737eced96", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da334348-04e7-4473-9a92-69743b844f5a", "sighting_of_ref": "indicator--eeb157fe-9e66-42a6-98b8-480819dd2412", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed05146-7a39-47ad-8ebb-5064ca96c01f", "sighting_of_ref": "indicator--6366e81d-fdca-4e98-8dc4-be9894806898", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4e0d82-43d3-408a-94f0-8c041753ca2f", "sighting_of_ref": "indicator--10169b64-6035-4288-9918-f26425e5c5cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deab7936-65af-4b22-99e1-e3e1d9ee4904", "sighting_of_ref": "indicator--c54a3a3c-82eb-47c2-9dcf-bafe1b1ab46e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c305c6b-2ac3-4a2d-a365-4a232438799c", "sighting_of_ref": "indicator--f2e423e6-4b64-4157-8a6b-a7c1fe189ace", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6a75e9-7794-4ec3-9758-293021458046", "sighting_of_ref": "indicator--7338b44c-ce7c-4109-b702-a45654664728", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a5e905-accd-4cb1-a20b-2d97708a0b35", "sighting_of_ref": "indicator--c1c2ffe0-dcec-4760-950f-c4e09c6ddc61", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840baf8f-f05d-461b-9c37-f07c8c5b3de8", "sighting_of_ref": "indicator--a5489457-7b58-47c8-be3d-aa8ff83fd542", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4460b84-a7d0-47db-864d-98b66777242f", "sighting_of_ref": "indicator--3bbdac08-bab3-43b0-80c0-2569838dcc31", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2818bb3-30e6-4a09-86d2-ae7c0f193311", "sighting_of_ref": "indicator--ff08b96f-6203-4b4b-90a8-bfd5ee722c20", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd62dae9-449c-4359-bce8-0f8d1ad6b8fa", "sighting_of_ref": "indicator--045af438-8f1e-403e-8d34-c9c09b007506", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8256b432-29c6-4231-8610-02c24a1c35f4", "sighting_of_ref": "indicator--1d746cbc-f749-4859-884f-3fb20b7baea1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7005a266-80aa-4ee9-abe8-cc16d646acee", "sighting_of_ref": "indicator--e3c5e61a-7bcb-4f66-8bc4-116139e52f2a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfdc611-f01c-4171-b548-68fe8318071b", "sighting_of_ref": "indicator--8d713be5-033e-43c7-9d47-1917fd84bc7b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ddb499e-eeb1-4720-9d15-9f404b04c356", "sighting_of_ref": "indicator--6c5f9311-42a5-4538-9bf4-07c290cfe1c6", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3d3624-940b-498b-87e9-e792b7d7eb28", "sighting_of_ref": "indicator--f348e325-77cf-4a24-807f-9773e0b063b0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c304055e-960c-4fe9-9d5f-60269ec4b104", "sighting_of_ref": "indicator--f348e325-77cf-4a24-807f-9773e0b063b0", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e254e4f6-7a7c-489c-a8c7-9c464c720845", "sighting_of_ref": "indicator--f348e325-77cf-4a24-807f-9773e0b063b0", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffd1d3f-8a56-44bf-9acd-26f6acc2bcae", "sighting_of_ref": "indicator--2cbb2df4-3f2d-4dc9-8782-a6d6f44c3cba", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26eeaed3-2af8-4199-b6a8-b32f53dd8d8a", "sighting_of_ref": "indicator--dcfe0ac3-32fa-4a64-90bb-b34de7c95b7f", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adc4aae-faa0-4d4b-9352-534c3bc70f83", "sighting_of_ref": "indicator--a58a45e6-401d-48ea-ac33-efbd6fa13d70", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45080865-3b23-4e58-a84b-0f9c12e4f76f", "sighting_of_ref": "indicator--851b0d4d-6f2a-436c-8670-2fb61410938f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22748853-4608-470e-9a23-76348450c6e6", "sighting_of_ref": "indicator--8f85d7d9-7cae-433e-bfc8-7ae6004f51f7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c5f45d-869b-47ef-8027-1055a198a0b8", "sighting_of_ref": "indicator--f5f48899-3f25-4d3f-b9fd-c32dc6292fab", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde1e113-13b3-4a27-9987-3e22dec79928", "sighting_of_ref": "indicator--a30ed398-4def-495e-89af-bc132cb67018", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29726690-0995-44c5-b0d1-e52ca691e5c7", "sighting_of_ref": "indicator--82ca7510-df37-4816-9f45-8e33b875a15c", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb50bb7-9afe-4440-9d31-3e2a1b94a383", "sighting_of_ref": "indicator--59363da5-dd8d-47aa-b05d-63c063b5717c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4091d281-143b-4ab8-aecf-dba0ad2d1132", "sighting_of_ref": "indicator--5dc7eda8-966d-4c19-8826-fcf815a41926", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c00ed7-8b1c-4075-b407-daa6c115859d", "sighting_of_ref": "indicator--4e352eab-45df-4f68-b965-8b4818fab5a5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3276b9c4-08ae-4fea-b753-a9caf290add2", "sighting_of_ref": "indicator--e2fa3f0b-720c-496a-ad84-75a33d160ee9", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3808ae0-a0b8-4b7b-9dd9-2f68c121f159", "sighting_of_ref": "indicator--2f6562d7-bd15-4e32-a485-48b237494c5d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ecccae4-be0f-4b76-b061-c8c113a0679f", "sighting_of_ref": "indicator--2ab07373-557b-4771-b890-69729471ca10", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b282f504-4039-4dd0-818a-bea831574f58", "sighting_of_ref": "indicator--7281f024-9b02-4dc9-9303-2ad0a5d93a4b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451a58f5-0759-4c8d-8708-d48d50b5c664", "sighting_of_ref": "indicator--896fc94b-bd86-4275-9de0-af3690dc4860", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e209623-a897-48bc-89cb-1137d157e871", "sighting_of_ref": "indicator--5c80442d-9183-417a-9c44-10b5b51bfd0a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5008dc-6fe0-4315-900c-04c1562e2a0a", "sighting_of_ref": "indicator--17ca636c-6ee9-427b-a177-bb0ab2f20bbe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92fce6db-8130-4692-ae09-b491b5b95cc8", "sighting_of_ref": "indicator--bba3f65a-69a6-4ba7-afcf-fe2d241f5a1e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be5be3f-ecdd-493b-99e4-b3ce3b83e30d", "sighting_of_ref": "indicator--a4564a7c-f408-4acf-92e3-d0adf210aad9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db7ea9f-78c6-4199-9aeb-24bf4d2a572e", "sighting_of_ref": "indicator--f715b87f-7ce1-4c87-acc0-ae19651e1675", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a89a0f6-e67e-4e07-a200-66915670483c", "sighting_of_ref": "indicator--eb4764d2-eda9-4860-bc35-b211cbd8c8c0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f0e4b5-af40-4b3b-82bc-44032488ba6f", "sighting_of_ref": "indicator--ce62ce9c-3da3-48bb-8a39-5ad6cf35b17e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8714963-f486-4f82-9e6d-85cd058880b1", "sighting_of_ref": "indicator--4cbb366a-3e00-40e2-b52b-19c13a84b63f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7e7901-ab83-47b5-a16d-45cabfecc1c2", "sighting_of_ref": "indicator--5909cd30-c885-4a90-9bbf-46a6879f87a2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44acdd73-49d3-47f8-8c41-f51645c32ed0", "sighting_of_ref": "indicator--8885b3bb-2997-4582-807d-283f35803505", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01efda2-753a-4d56-9be7-9933f0e64938", "sighting_of_ref": "indicator--abf91509-8f32-4c05-969d-7cf605517bbb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccce2b4-799a-49bc-b7e5-d9b21055158e", "sighting_of_ref": "indicator--c0cddb8c-4c1f-42f9-a02c-6d865746660b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39351d6-78f0-4312-9d28-cebaa54641ea", "sighting_of_ref": "indicator--2d11bdae-eaf6-4414-9ab4-f38945c8b0ad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10c1bed-0b7c-44ba-8572-800100c9d503", "sighting_of_ref": "indicator--0f36112a-ce24-4056-b77b-2538ecc59a3c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e830da-467a-4c65-bbfd-babefb6d13b0", "sighting_of_ref": "indicator--43322fb5-4cdc-409e-a381-9ea17db1fe57", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40c0348-7b13-414a-8868-91697f4fa5e3", "sighting_of_ref": "indicator--d4faada8-76e3-400c-b463-4c0a0f6422ee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7b6d23-f2ea-49f3-ba34-d312dc31a99b", "sighting_of_ref": "indicator--0c293e9c-529c-4225-ab06-921d9c97d651", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd1e561-717a-4165-bcdd-1bffb23cde04", "sighting_of_ref": "indicator--9ff37da1-af4e-4eb1-9152-295e41fcc3c9", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2349cd49-e5c7-46ba-b51c-1b58b9cba25d", "sighting_of_ref": "indicator--a4a0ad35-90bb-4956-b989-3ddc19e1ca6e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4d7a64-9e62-4e7a-b2d4-20acfc7907c6", "sighting_of_ref": "indicator--aff79277-37c3-44f9-a7c7-5f9bb0b55d09", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd61b773-1c99-44f0-8e90-bb26eb6d22cd", "sighting_of_ref": "indicator--e01943d2-0e1c-424a-bd6e-172cfbe2e935", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef567ac6-fe2b-4c11-aa21-22ddab17e246", "sighting_of_ref": "indicator--5c0c7c13-5db5-42b8-aaed-aaa166b641c4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0b3b24-0db5-4b51-a5bb-2495e505b248", "sighting_of_ref": "indicator--f55ab6c2-df58-43dd-8708-6854b572e210", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771f1ceb-2ea1-46e2-8903-211a65920b80", "sighting_of_ref": "indicator--28eaa0dd-82f4-42c0-b95b-7089d434381e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6384d9b-ef90-473d-975a-f434e6b48b80", "sighting_of_ref": "indicator--28d018cc-bebd-4d8e-9964-163dc18f5d5b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52960f05-2424-4730-8301-4bfa4b42a056", "sighting_of_ref": "indicator--36802b19-70b6-4540-a218-b2fa0b43990d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afffbc20-75ed-45e5-9c89-a6a69c39dc05", "sighting_of_ref": "indicator--113a80cd-1f44-4c39-bab5-a8bdc8bdbabb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b6f7c2-221f-431e-9fb2-85152a4f3502", "sighting_of_ref": "indicator--3a5e7b58-b1df-424a-8116-d66224c2a3c4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69de7a7e-9b8c-42ed-a685-31df3560b9eb", "sighting_of_ref": "indicator--03833b88-c969-4c71-8ad8-7347b317005f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259a5ce5-760c-4df4-9efb-4482288f99e4", "sighting_of_ref": "indicator--d7af5a6f-242f-4ddb-86d4-0d18b58909b2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6ed33c-6b2d-47fa-8db3-1887009038c5", "sighting_of_ref": "indicator--50973edc-4c8a-4593-b93d-b76ba84df95c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f03602f-e9ea-40fc-b290-2c23c06cd6fd", "sighting_of_ref": "indicator--0b3c6c06-5322-44ea-b159-4da7eef2b454", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dc62b6-742e-4f71-bdf4-1a5270ccd29d", "sighting_of_ref": "indicator--71088a19-b42a-48ad-a9bb-06c29293fc18", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df74245-ed27-4941-8e59-3e6e830bd9ea", "sighting_of_ref": "indicator--6b869e04-34cb-4a8b-b7d7-01a34d281d29", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39177c4a-16a1-4a79-8b12-a54bc47bd1ca", "sighting_of_ref": "indicator--d1db4d7a-67eb-4de9-a6ed-2bbad92ce162", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c8943a-2ba5-43a1-aa59-284722b150cf", "sighting_of_ref": "indicator--85aed9d3-028d-4aed-8b88-16c9cd8bcd9b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9158bcb1-1afb-4a72-92e4-42193d4d2200", "sighting_of_ref": "indicator--98a0727f-214d-4eed-b8c9-32f69b1f032c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5ec931-07b7-4e9f-8e9b-6918132e36a9", "sighting_of_ref": "indicator--ec7af08c-f881-4aaa-8fd5-965086d33ed3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aba1824-f146-4cbb-b22b-62754f3932d7", "sighting_of_ref": "indicator--be20ab74-92e5-493f-9604-281c0420dc24", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11216b9a-8a18-4fbc-88a0-525a0ba13927", "sighting_of_ref": "indicator--596fb6b9-4926-4f10-acc4-203cbdfbeb4b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af22a3e-e654-4806-909c-1bcfa1aad099", "sighting_of_ref": "indicator--ea9f29e5-6011-4796-9895-763cf2cb1022", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094db079-197b-40da-88b0-4c7ff160dc0d", "sighting_of_ref": "indicator--f0c83b98-a51b-43f8-b188-006aea0b9346", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9833eef-f15c-4b5a-80fb-af29f53bbbd8", "sighting_of_ref": "indicator--4ee512ce-66cb-4fba-bde8-6935e43d4d57", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ce1dd6-9089-4445-96d0-5e7a071e00f9", "sighting_of_ref": "indicator--af57754d-d074-4bf5-8321-66342b3eb32e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35a6cb6-f222-4404-9520-99bcda4fcd86", "sighting_of_ref": "indicator--74d5cae8-f4ce-4b15-ac62-08a2df565156", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51db2bb0-9e49-4d22-95d1-eb1a479e89a2", "sighting_of_ref": "indicator--ae69546e-dad3-45c2-b6f3-4064bd38b0d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f9d5dd-3a75-40fc-ab3f-bc52c4b72583", "sighting_of_ref": "indicator--92956414-dd0c-44a9-bb03-e48eff4bab16", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe742b1e-9e83-4fa5-8e60-8eb74be37417", "sighting_of_ref": "indicator--13c53337-6522-4b22-98c7-4e210a872f1d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee80180-1ff6-4ff5-8f44-9e434d9ca63e", "sighting_of_ref": "indicator--1352984a-07fd-4b44-826e-42c099c9f845", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0418ebb0-0cde-4b0e-8906-579a7bdc85fe", "sighting_of_ref": "indicator--054ea79a-6a5a-46bf-867c-737ef97b82ac", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179731c0-0660-4ba7-aa9a-ef1e048ee216", "sighting_of_ref": "indicator--a7527bfc-0cb6-4ba5-9ffb-bda5f14ee48e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dafda297-5c9d-4540-8266-6c7f7de4f368", "sighting_of_ref": "indicator--5078ba07-b901-4329-98b5-9bd66e6fcc4f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba6abd3-662d-4b2e-a5e2-4ae330975471", "sighting_of_ref": "indicator--8a767d18-57cc-4e16-a195-a2fb279dacc0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fcd4faa-70c2-4fcc-bab7-af8e1d4b7a6c", "sighting_of_ref": "indicator--0be0e8b4-c427-4b0d-978c-e74f5cbb5f32", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9bb3d7-8e47-4f1e-b609-0e4838c592aa", "sighting_of_ref": "indicator--c7f5662c-3048-4760-8580-2c534afdb783", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62bfa26-7b16-4da3-ae94-f040ebfbb7be", "sighting_of_ref": "indicator--9a076d9b-1442-4284-93f9-28499c35189e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5a0544-c4c0-4016-805f-28e1672b9ee9", "sighting_of_ref": "indicator--4ccd3dc6-c6c6-44ef-a11a-2a6783d3618e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b0ef0e-f118-45a5-99fe-1eaa72e4fa19", "sighting_of_ref": "indicator--46960602-41fe-47fb-b56b-a01419866a65", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f685ee15-0628-4043-81fc-f1392b5d05bc", "sighting_of_ref": "indicator--64b9df75-3d91-4ba3-b25c-9594b3beb578", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5bbe21-e820-4bab-bfff-d6737ff7a4fa", "sighting_of_ref": "indicator--15133499-2b37-485d-8321-2a6132ed2f6a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27793b69-3abf-42a8-a50f-a5f7d5e0c130", "sighting_of_ref": "indicator--789e6eea-c333-4348-ae0a-ef552ee19fe9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8aa8c20-7b86-43c0-bc25-50129947bba3", "sighting_of_ref": "indicator--e17fda8e-f182-4df1-8db5-4b4b5f986402", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4224b6b3-1728-4eac-8064-d1e7b82b2c2f", "sighting_of_ref": "indicator--6e4eaf20-e719-4681-87d0-a381d59029d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3857b133-cc0f-4911-8b29-6bc97266da6c", "sighting_of_ref": "indicator--62076692-dbd5-4970-840c-6c255dac573a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e59ba29-dd16-4b6a-ac12-d328cc1932a6", "sighting_of_ref": "indicator--7f57e9bd-e651-4c10-bbbe-3a96ed0deb5c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69632304-9a74-4c68-b47f-db941f2c7c50", "sighting_of_ref": "indicator--c69a8606-58a2-4440-8ea2-208a88e133fc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab83367-3cdc-44c3-8b16-11e4a4e39721", "sighting_of_ref": "indicator--c58755d1-d5e1-41ef-9efa-81d67ff00e53", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99322593-a842-42cf-81de-bde69da5b54e", "sighting_of_ref": "indicator--2e03e202-aa2f-4f22-a9a0-abad790ffa4e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b43a243-48b2-4f8f-8441-ab0a74ad971d", "sighting_of_ref": "indicator--bd3a9763-62de-4a0c-86df-e4dfba6a1504", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab91374d-3c61-411d-a31a-abd311acf36c", "sighting_of_ref": "indicator--4755f0a0-d05d-40d7-8670-963b2e64d188", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55695b0-f2de-4705-a6aa-2bc27e7d974d", "sighting_of_ref": "indicator--9c6593d8-fba7-465e-94be-799eb8407bfc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f874a4-3854-4061-b288-6f4bf87bd37a", "sighting_of_ref": "indicator--2b87ca65-b7e2-43fd-9346-4224bf8b11fb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60feed44-8587-4d4b-bd04-62dc6647e0c7", "sighting_of_ref": "indicator--410e77a5-c628-46af-8aba-0ba05fd651fd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48726cff-f1e7-48ca-9f14-91d00b565ddd", "sighting_of_ref": "indicator--ce9b8002-b505-4c24-a081-044e214cac03", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1116ad4e-c9fd-414d-9993-72abdd440af3", "sighting_of_ref": "indicator--8da5c2b7-d6ee-447a-9e0e-e24b772c4a86", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53435dc-6954-4820-b57f-980a0d731dc6", "sighting_of_ref": "indicator--50ddf9ba-3bfa-4044-8860-0518fd92baad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce22cf0d-eaa5-41c6-b109-48dd7ad185d7", "sighting_of_ref": "indicator--46f613ec-27c2-422b-b680-ff9ebfc599b1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2018bb05-7a96-4f99-bfce-af5b654291b1", "sighting_of_ref": "indicator--3217dfbf-7b64-4f40-99dc-d8713cd3271a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e3b883-a19c-489c-8124-150883f2d634", "sighting_of_ref": "indicator--1b81c6a2-2e18-455b-8079-15e92219ad7e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d891f61-b423-4d33-b7f6-78b6133dfaa6", "sighting_of_ref": "indicator--52a8d3b7-0186-4a13-afe8-391cd22184a3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0aba0f-d0fb-4d6b-9f5d-c9302e812d89", "sighting_of_ref": "indicator--d289fa7f-7d2d-4956-a45b-479ef2ccca9b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af16b243-bbc1-4b3b-b2ab-b741e50eb524", "sighting_of_ref": "indicator--6404ef27-881f-4879-8ecd-90fd5e04aebd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71abb783-7fce-463b-a3f5-a3fe85148863", "sighting_of_ref": "indicator--888d4678-6c48-4535-8753-ecbf2ebb7bc6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd2e952-6637-42de-bcb7-ae0987b02ac9", "sighting_of_ref": "indicator--5dd27844-0e20-4818-91b7-21cb8fe447ba", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce5808f-cc76-4fb1-904a-360bca8a9093", "sighting_of_ref": "indicator--74d845cd-a198-4ba1-a0dc-b88d7c09fef9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b5c574-af05-41ef-a6cc-3c5f689d9fb1", "sighting_of_ref": "indicator--6f04847a-583b-4f5c-a9cc-8082e2c72070", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08790442-a69f-4792-a45b-30d1f7270e83", "sighting_of_ref": "indicator--77021b2b-1498-4a7e-aef3-b5c2f63fccf0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166473cf-e8cb-4667-a4c2-c6bc9753d39e", "sighting_of_ref": "indicator--201d012e-85ab-4e23-8009-e5aa2e0fd0c3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a21dca8-44a2-4a6a-9da9-0c5baede55c2", "sighting_of_ref": "indicator--887957df-118e-4b44-986f-a0033e068d07", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cbc877-f775-436f-b1a3-748d6734d4d6", "sighting_of_ref": "indicator--363642c8-f722-44a1-a813-1f9f4582565b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762c8393-37b6-4d47-9c6d-16be77ac76b2", "sighting_of_ref": "indicator--0e2a48e5-2af8-4d9a-94da-b7d5ff63dd8b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ebde9f-42fc-4019-bd2e-5a81cd5c3efc", "sighting_of_ref": "indicator--22d92ac9-22df-49ad-a461-956f1741fd3c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3e6fe2-600b-4392-997b-98d64cff855b", "sighting_of_ref": "indicator--2634c96e-18c7-4f9c-95b3-6b10d9ad2441", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d15770-8879-4117-87f3-d3c95ebb7a97", "sighting_of_ref": "indicator--66d8c60c-66bc-4717-a9f7-d8467d5469d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc017dc-9299-4f4f-b450-3e522938c081", "sighting_of_ref": "indicator--aa7d40a1-a572-4fe8-93e2-1f0508dde634", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60afeea-55ee-4ae0-a597-4763a36af701", "sighting_of_ref": "indicator--7015038d-0443-4811-b235-05d5a0cd0222", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad2804c-bb63-4892-b48d-0dd8baec7aed", "sighting_of_ref": "indicator--d25f1cc8-a46c-4594-8845-5b429a4abbf1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10b6a88-f9b3-4ab8-aa83-256babceac93", "sighting_of_ref": "indicator--abe1c656-72b4-4324-be1b-1ec054a6f58b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6b7c99-4c58-4156-884a-7f50f2351828", "sighting_of_ref": "indicator--df90ac54-f6d0-45a9-b293-4e09ec9fc70b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2543d97b-a387-4621-95f8-74092a261612", "sighting_of_ref": "indicator--1169ab32-e7bf-4d84-8a47-9bccb7fcf88f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a14f53a-bb75-46b1-b4f1-92b2382d7ccf", "sighting_of_ref": "indicator--bf88eb1b-febf-4c8b-a3c4-7da69ae1f6f9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c090bb-4e9c-41f5-ad32-adab5f266f66", "sighting_of_ref": "indicator--27bd60ac-65fc-4c2d-a292-d954705eafd1", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d65c735-a2f8-4168-9886-f48c4b3938db", "sighting_of_ref": "indicator--b0309ec1-5d5f-439e-a91f-e13d299c8516", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fa660b-2c9f-48ed-82bc-dc486ee374f8", "sighting_of_ref": "indicator--acd77194-8f0c-4205-8541-100d6ca57c88", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e54b83-1abd-4e19-bad3-f54f238cf736", "sighting_of_ref": "indicator--763a0557-d067-40bd-a042-d1602f3a045c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8a8ac0-675e-4995-9ae8-5d4b167f548b", "sighting_of_ref": "indicator--9906b623-6c48-4c02-89ec-dc4d98b17981", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e05654-0111-4d79-b968-5829045de05b", "sighting_of_ref": "indicator--e8bc4211-09cf-4302-a36b-9df90242cbb4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c390faae-a4fc-4390-aaf9-0bfdc5c34518", "sighting_of_ref": "indicator--aa544c78-f922-4c2c-bfef-178aaf2ff7d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb82b8b9-1261-44a9-a8fc-326ef1af7357", "sighting_of_ref": "indicator--adebfdb2-43ce-40ac-b436-d7536957cba2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0e32db-f111-4ddd-837e-4b9970756403", "sighting_of_ref": "indicator--ca0d98e1-8030-4f07-b576-acc985dd5a88", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abbc865-d012-482a-b50d-163eef0f2bbb", "sighting_of_ref": "indicator--318e29c5-e6d6-428c-87aa-e42cfb11a537", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74263d8f-9db3-49ff-8805-815c22a7b8ad", "sighting_of_ref": "indicator--b390e890-6cef-447d-8271-4c6dc9d6b3bd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b34d858-43cf-4cc6-9dde-94089ca71376", "sighting_of_ref": "indicator--3617a785-0450-41b4-8ab6-cf33bba01cac", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89def5f-f1f5-4719-9458-c50a6fa3494f", "sighting_of_ref": "indicator--409276b3-c507-40b8-a7be-e1fa451eee52", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b580c896-f560-4818-91af-c782d248a83a", "sighting_of_ref": "indicator--7de33a9d-8a58-40f6-8719-ea2d65084457", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07c374b-205a-43b9-831b-202e4e67c8a4", "sighting_of_ref": "indicator--5891ee22-325d-44b7-8b07-aaaf1a10e7c6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61feda91-5f83-41cd-801b-6bb927467fff", "sighting_of_ref": "indicator--a864780a-c0ad-4660-b23d-e39e9d2ce52c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546abc30-487c-41b7-a670-0c7e82f5a03c", "sighting_of_ref": "indicator--1c0ac000-afe2-4de6-a07d-4720760bfee6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9caba61-c21a-44fb-9bf9-b5c42ac44acf", "sighting_of_ref": "indicator--2aa281dc-b69b-4d69-b3d5-6f353b775b78", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614b1d6b-b314-4087-a5bc-2103df74fc84", "sighting_of_ref": "indicator--1548a2d6-4766-43a5-8b51-cf69bb3a1532", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e61a411-5b2e-49f7-b70b-abbc5976931b", "sighting_of_ref": "indicator--66945ddd-cb3b-4951-9091-ec7b0c610bdf", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90040b89-ce5d-4518-9798-9a9e9de7ff8b", "sighting_of_ref": "indicator--176365fd-9856-49b4-a64f-ceea9f9cced7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d8999d-1856-4d5a-9e91-fba8c6246572", "sighting_of_ref": "indicator--572164a4-7385-45c8-8965-216064a93072", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb82c36-8cd5-4b23-a839-6963444fc8d7", "sighting_of_ref": "indicator--fc4c6af9-40aa-47d4-9369-46f341385dd9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9cf9fdb-0aac-403e-b767-82b2141b287f", "sighting_of_ref": "indicator--09120614-8b41-4984-bfc9-35afaac04ba1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cf7ace-29a6-4044-a0ae-b224dd5c3763", "sighting_of_ref": "indicator--30565f69-8c3a-436f-8b57-4b23c50bbbbb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c15239-b2a7-4a1c-8598-9253ec84aa22", "sighting_of_ref": "indicator--d93f44f8-7f51-4ec2-8ac0-978ccc654f33", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424dbf96-4fa5-4922-8779-2cb9c221b088", "sighting_of_ref": "indicator--adfbd400-264b-42c1-adbd-7fd3a3a8af1c", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2706fc-49f7-4fa6-b6d4-9f3af797c54a", "sighting_of_ref": "indicator--77a3058e-37a8-4171-a608-79d6c85e617e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d7c481-4330-482d-9aeb-a27bbea76e98", "sighting_of_ref": "indicator--65d6931c-ea4a-440b-8f36-89b9259bdffd", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d131e9-27a2-41d7-8cd3-f414d7cd0679", "sighting_of_ref": "indicator--98ff0d48-c976-4a86-b239-3bf400fca66c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5839c8-75e7-4cac-bc5c-2f56483bf9ee", "sighting_of_ref": "indicator--eaf9e049-57ad-4cab-b548-340e656d4647", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985dd7ce-bd4e-49b2-9d28-70d36de57c45", "sighting_of_ref": "indicator--44ca6867-7b9f-4019-ad9f-84cecf5c0682", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc608c1-8b6b-492a-aef6-c2759bc69222", "sighting_of_ref": "indicator--d0b390ba-a700-42af-9e3a-dc7f2dacafb4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4106d96-350b-4d80-bf73-d10c7d63ece7", "sighting_of_ref": "indicator--62b7473e-94b2-4862-8aca-0e109c8241ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f63ee7-795d-4339-96d6-232b830984e4", "sighting_of_ref": "indicator--3c1a6a40-232d-4a9e-ae24-d5b7775c7e71", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e990777-5355-4476-a72b-1b5b5a33ffea", "sighting_of_ref": "indicator--b82ccd75-c903-4a7e-9435-0c83b368d52f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25d98a7-afce-49e2-91f3-469bcf216ca2", "sighting_of_ref": "indicator--4b0f4340-3f91-4bf7-8c92-bba15140f546", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61520893-6b09-4797-9bf0-22b363288f89", "sighting_of_ref": "indicator--4cef5057-53ee-49a9-991b-ab169c68c97c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbd0635-85ca-4338-9a4e-646d5f4be465", "sighting_of_ref": "indicator--a3368e7a-3a0b-4dee-9d87-a4d845aea1f3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca6d4b7-d8f5-4199-b712-03ae28c52982", "sighting_of_ref": "indicator--56918c3b-c5c8-455e-9e91-7c41732b80b9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e6c30c-6194-44a5-8370-7dd21fab4c77", "sighting_of_ref": "indicator--998c13a0-d9ee-41bd-bc7d-af269373d3fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e526fe-85cb-4674-9f86-d55a997e27b5", "sighting_of_ref": "indicator--cdcd1050-94c7-40ca-8f6f-ed7b4db0e202", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab00f2e-d04b-4d85-8874-055032271fdf", "sighting_of_ref": "indicator--78d94fb7-487a-4205-adbb-a3ee8269c07e", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765bb892-ffb8-4a50-bbde-ece5c31be863", "sighting_of_ref": "indicator--cb64e1f8-f3f1-4283-911c-2a83f443958e", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de59a025-42dd-420b-a116-45aade4519a8", "sighting_of_ref": "indicator--842a5d0c-4300-442b-9115-47a9fc0d7f9b", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4c973d-f866-4dce-b630-718d101e6aa2", "sighting_of_ref": "indicator--4918d8bf-73be-41e7-a24c-db5d85625165", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f3f0b5-5c96-4bbc-8544-f14eb8a5f2f8", "sighting_of_ref": "indicator--376c2287-72f0-4683-96b5-6532ac93aeb2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe55c86-3436-4ad0-8117-5c2fcb2520a6", "sighting_of_ref": "indicator--c45fddb7-28df-43c9-9ff4-036bf6c2372f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30c1591-880e-4adb-ae71-dd2fe17beb17", "sighting_of_ref": "indicator--c2b675fd-ec4c-4c9e-81d1-f3b90b1b023d", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a11d73e-3359-4f81-a076-1270b1052e65", "sighting_of_ref": "indicator--ffcd72db-009c-4d1d-83d2-7709af8806cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c362f00-3b31-4c9d-b196-8dedb3d551a5", "sighting_of_ref": "indicator--83a03f7c-73a6-4a7f-9f19-fc64ad99ded6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61cff42-e146-46ef-a054-f91523831755", "sighting_of_ref": "indicator--e5b22f18-8e3c-4cfd-ae17-52329a60bd60", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a350cb9-e33b-403b-835b-7714db20d38b", "sighting_of_ref": "indicator--e5b22f18-8e3c-4cfd-ae17-52329a60bd60", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feaaba12-e320-4aed-8550-4579d2531a54", "sighting_of_ref": "indicator--e5b22f18-8e3c-4cfd-ae17-52329a60bd60", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7cb1e9-82c0-43cb-bc6a-32cf4bdd3388", "sighting_of_ref": "indicator--f3bfb412-a9af-4044-92f8-8a282f39ce9b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611f2a9a-6138-4e8c-a04e-3db7a8ddf710", "sighting_of_ref": "indicator--64541f36-5eab-4b68-a348-654b8d78814f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c385c1a7-9300-471b-beec-14be0e65b204", "sighting_of_ref": "indicator--2863a7f3-a674-496b-8ab5-b8717e10e7a5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662f49b7-badc-4571-af9e-df979de812ff", "sighting_of_ref": "indicator--c46ccc1b-2411-4f48-8852-eb6ebaa4d2c0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a11958-6a1a-4f82-bf94-24cac9dfcda6", "sighting_of_ref": "indicator--388f9118-0aa2-452f-a4d9-df2e011639c7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f041d49-c7dc-4c92-bafd-4aef8f179be0", "sighting_of_ref": "indicator--652fd6da-1828-40d1-9e4d-a2b2e65101ec", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0ca9bb-1d2b-4c17-90c3-444a24136304", "sighting_of_ref": "indicator--bedfd431-f8a0-4177-aa8b-52841f2ed44d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17beb8ba-eaa5-4dab-a293-46c9fbab42aa", "sighting_of_ref": "indicator--0735933d-79b1-4423-9ed0-4d747486d1f4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58932d70-1d68-489f-a5e4-1c62d74b495d", "sighting_of_ref": "indicator--720c8d82-db5a-48b5-979f-8790ab93b76b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30e018d-e150-416f-9514-ee16a946deb9", "sighting_of_ref": "indicator--f1748560-64d0-47d0-8ce8-197fb9c01d8f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9774731f-6d0b-421f-bb73-1c2b648084bf", "sighting_of_ref": "indicator--0fe6568e-0f18-4827-b2d1-c054c7fcc10d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9fe119-71ef-403e-a009-86ed745c2dd8", "sighting_of_ref": "indicator--99bce1d9-c9af-42a5-b7b5-149b82a875cd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1cecf62-d7bc-4851-ac3f-d48a97188b69", "sighting_of_ref": "indicator--094a7902-5491-4a59-864d-fbe0c5f8d67a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cf8585-9ad6-4451-a677-8dbf44149e38", "sighting_of_ref": "indicator--a1ca51bc-67cc-48fb-b55e-f9bbb2bd6a32", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6213a16-868b-4d96-bae2-e1de4c372ead", "sighting_of_ref": "indicator--c5bfb71a-58c8-4dbf-a4b6-da0872c65757", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d94f217-ec17-4874-ab56-808181ca0849", "sighting_of_ref": "indicator--fa232b76-60d4-469c-8264-e71ae215c7f5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e8a168-fb05-46ec-9bf7-372581cb161e", "sighting_of_ref": "indicator--61afc7b0-b8b3-447c-bde0-1314131135d8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee739a7-7dc6-49ae-ab9a-1e7640f36d01", "sighting_of_ref": "indicator--863ea186-3100-4acd-8ebf-a6e5a2ba7e4b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d6a300-2f03-4e56-9409-0a27514227a4", "sighting_of_ref": "indicator--05d904cf-e57a-4de8-97fe-84523ade8456", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1024057c-2f12-44bf-80eb-8940d878ca77", "sighting_of_ref": "indicator--e02bb174-b824-4e34-9ebd-da66a134ad95", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff23472-db53-421b-97b1-bb8281a563c9", "sighting_of_ref": "indicator--0dbc4425-b716-49cc-a6d2-0f6797a410ad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a9db29-6c50-4aa3-bcd0-5276d9f71df2", "sighting_of_ref": "indicator--8c70d6be-0f83-4959-82ce-e06894c37d6c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617b4905-6081-4f26-8e80-eb7024006ceb", "sighting_of_ref": "indicator--f58dd6b7-51c3-450f-8661-73fdba897897", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45e358f-4a8e-489f-833c-169b457eaccf", "sighting_of_ref": "indicator--e5117c58-1427-4c95-9796-65a55dd3a7a7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475a40f2-38ef-4ca4-bffb-a749ed6723ef", "sighting_of_ref": "indicator--f75c8c20-2a5f-4a39-b0f5-ff0883bfebe9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd11c05-347f-441d-b7fd-61c235825824", "sighting_of_ref": "indicator--928422eb-29e8-4606-ac3e-e2ed24157f0d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d10b712-975f-4ae9-a51c-a203bb773c7f", "sighting_of_ref": "indicator--ed42b2e7-15c8-489a-b9b8-091897d4fd81", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca0e88e-00d7-4437-ab98-bad24d3fbadf", "sighting_of_ref": "indicator--6ad449eb-b8aa-498d-9a38-893e86528ec7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2fdb63f-e2cb-45ab-8fcf-271f50e06d4a", "sighting_of_ref": "indicator--2125cdd3-b427-40e5-afcf-d77e1a74d4a2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2ef7b8-b845-490e-a9cd-6fb1a380c0e9", "sighting_of_ref": "indicator--74c70521-c34e-4131-8e09-3ff9166f9971", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdeab41-63f2-4314-80ad-bf4c226b29ef", "sighting_of_ref": "indicator--88401014-cdf4-43db-a260-c58f0b568a69", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeeeff53-3242-487f-a51d-1d9ef081703f", "sighting_of_ref": "indicator--6a2386a6-b099-4e82-99f0-efc29c01a3c9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a1b8ff-954c-47b5-a72c-df4f892f9314", "sighting_of_ref": "indicator--eb93e7fe-2f39-426b-b666-c02b6a8f6da3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2518992-2a07-46d3-9bc8-c10c47cad548", "sighting_of_ref": "indicator--127117a7-4ec4-4b76-befa-afe2daa871b5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a43e5f1-c0c1-494c-9c75-a90656834a52", "sighting_of_ref": "indicator--3e6f1ed8-9966-4461-840d-b5326df4ec2e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2876c3a8-79aa-4ddc-b3d9-1291a2af98a3", "sighting_of_ref": "indicator--0fc85d9f-756c-4b1e-8520-6a70a480fb21", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4703ba1d-81bd-4f9b-b44f-94a685633cce", "sighting_of_ref": "indicator--261ff9fd-e19b-43db-ad50-f866cb80723a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888ec031-8857-4983-a7cf-d73fde9a7790", "sighting_of_ref": "indicator--b234bff1-4cf2-47eb-bd9f-a130b4ecca44", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefe79ef-395e-4174-aec2-89062316cc47", "sighting_of_ref": "indicator--3f1e72a2-3b3a-43ce-8843-0819dafcb6f3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b718da94-2f28-4d30-aac3-1dbfe8944870", "sighting_of_ref": "indicator--4dc795e3-0912-4410-b45c-b3206227ce70", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be898e7d-9587-47ce-b3e6-6d9029ab1703", "sighting_of_ref": "indicator--6b8bd557-b86c-4b81-9204-42842538968b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d48afb-97d2-4a0f-86dd-0e5023d001dc", "sighting_of_ref": "indicator--c535a69a-7722-468c-916e-ef9c70d2e495", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601418cb-9967-4db8-b290-c839a9963b1b", "sighting_of_ref": "indicator--1d668040-1b09-4797-8f19-4e890aefb5fe", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ad2929-9761-4530-a80d-e53a7062fbbe", "sighting_of_ref": "indicator--5a0d5a3a-0f3a-4030-88b4-c444cae7d634", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e962b1-8987-407e-b1e6-0ad648499d23", "sighting_of_ref": "indicator--d08c697f-23e8-4a75-9c3e-a5d964f9cea0", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbaa6d3b-4e2a-490d-aa16-5b019bf8a249", "sighting_of_ref": "indicator--389d1aed-01dc-44c4-99a0-96e9a6f6e021", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d21f764-4076-4021-af49-724e9cd65435", "sighting_of_ref": "indicator--040a7ec8-4910-4f9b-b91e-e1c05fa7d632", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b298450-dd11-4d3b-94ed-44714c19f4b6", "sighting_of_ref": "indicator--42e6e465-b9ac-45fd-a17d-84542c060134", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557eff0c-171c-481f-ad4d-4c03fd2f4226", "sighting_of_ref": "indicator--de7538d4-ca4f-44a8-8e05-0c34e0a48514", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e216aa-4a69-4b42-961c-ca0657341d76", "sighting_of_ref": "indicator--f0af194e-8518-4cc3-a564-9e597e91a1cb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c5b9b1-e9cd-49bb-82a0-002eddd8733c", "sighting_of_ref": "indicator--88599aa2-70a1-4de5-969c-ca6fd72cf6f1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdd017a-7ece-446e-bb37-3ac5d4fb8cfb", "sighting_of_ref": "indicator--1ef1a702-5b1d-42c8-bce8-966be9fb67d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e01c3b0-8703-43f7-a152-a8bda4602734", "sighting_of_ref": "indicator--f6a25472-7d68-4f9f-8411-e131fbe1c541", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff348dd-a440-4599-a2f6-b4e1cf0aee3e", "sighting_of_ref": "indicator--5719407b-4fe0-4442-8e03-6e13866f13e5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebff1a0f-9815-41b8-b2a3-f769796479b3", "sighting_of_ref": "indicator--25ff54c9-a6fb-4a52-9672-1ae51b46f9ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8feaee-41a4-4977-8025-edc68ade5c57", "sighting_of_ref": "indicator--c041999a-29a0-4b51-bad3-8ec7db9b9440", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e080b4e7-308e-4173-bf95-9d59ceb6790f", "sighting_of_ref": "indicator--42d7babf-411e-47a2-b437-1762d9598adf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea50f57-b3f4-4c7d-b007-6b538d5b707a", "sighting_of_ref": "indicator--3885bf4b-6048-40b5-ba09-df395ff819db", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e545deba-ecd1-40f5-a722-d2f11e377ebd", "sighting_of_ref": "indicator--9dab1284-8470-4b93-b6c4-983e5c87b205", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7445f20c-981d-4b65-a33f-273e770f9700", "sighting_of_ref": "indicator--21a40978-2df9-4daa-a6d7-15e26e768c4b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7939d6-62f3-48c9-94a7-b487422515e2", "sighting_of_ref": "indicator--793ec5bf-1be5-4a6d-abe0-230f2aab87a9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b178c75-2dc8-4e3c-af57-d33df6b94c42", "sighting_of_ref": "indicator--75f264e4-c514-4c9f-a4e8-ff83863b0084", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f52e0b5-a45d-4cd7-8b7f-005dbb7c54d4", "sighting_of_ref": "indicator--465bf3c5-bac1-4154-b761-fc66031dbf0a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4582fd6d-09c9-40cf-8e12-9dd5c27848c1", "sighting_of_ref": "indicator--193e09c3-ee6f-4f29-b785-035f46374021", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e480b38-db3b-49fc-914a-c9abfb78dd00", "sighting_of_ref": "indicator--f645c76e-e353-45fa-990d-3856ce8621f3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5848933e-9dc2-4e1e-b689-7edb335edd9a", "sighting_of_ref": "indicator--1f30b803-82e4-44ea-9b96-ddc96ffaa649", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f022a7-1c97-47bc-a55c-f74a87f12b32", "sighting_of_ref": "indicator--093bfc9f-6ff1-496b-b81c-d737a696a712", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9573826-09e0-49da-9af8-72623a9eb81c", "sighting_of_ref": "indicator--48516f06-678d-4d0b-8ef3-7c28bef13988", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c9f112-a021-4856-9ec9-e24a71832cf5", "sighting_of_ref": "indicator--b4026fd1-53e5-44ea-ae7d-37a44d9a85d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691025eb-2520-4088-bc35-ccafcbde5071", "sighting_of_ref": "indicator--3679c294-2443-4f11-b3d6-55ac5dad9f96", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d24aa0a-477d-488b-afc3-de8840cd890d", "sighting_of_ref": "indicator--20ddc91e-cd80-4473-9e20-b6c7d6076868", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36082177-1821-4559-a6c8-ab0950c539e4", "sighting_of_ref": "indicator--e3c130ea-e654-4c20-8c34-50c704329447", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693b3550-7d95-478f-836a-4828591fd6ca", "sighting_of_ref": "indicator--c1a0f8a2-3982-473f-beee-2e637388a86a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb3a82f-6585-4c04-8bed-f94fd1c01e3b", "sighting_of_ref": "indicator--3de46071-6cc5-4660-8018-26dc89c71001", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29090e0a-4d94-4f7b-b5ff-c47dacb707f1", "sighting_of_ref": "indicator--dbbb1a15-abe2-42a4-ba3b-fa7b4ef6424b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1366c05c-ff59-4e8e-b7c8-a40d6055a6e0", "sighting_of_ref": "indicator--7be7c5f5-590a-472b-bed9-e81621563c65", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf9dc52-f5d8-49a1-8e0a-21110a83841e", "sighting_of_ref": "indicator--3bf8e9ee-14fa-42d2-817c-3e72c92bc243", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817ce762-b66a-41b6-a59c-7e60ecd6b970", "sighting_of_ref": "indicator--42c7f880-fe26-4e56-bd3d-be47fb3f82c6", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95152f98-8d91-4656-ab8e-c84d65aa62a0", "sighting_of_ref": "indicator--4da07aee-22c8-4c1f-8f30-73f22038bd85", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5ebeb3-77f0-4c00-91be-5efeb32eceb8", "sighting_of_ref": "indicator--ba3b45a8-1b72-4a59-8789-42d7db3a9cb2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe71b01a-f7cb-4130-afb4-3a9488df0882", "sighting_of_ref": "indicator--72600b40-83bf-478c-9842-47d9870bcf7b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631d9373-fe1a-47ae-80ad-496b884894c5", "sighting_of_ref": "indicator--58bb9be4-8544-417f-9cf4-131ffb45d824", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2f7756-3a7b-4894-8cca-90d9837cfcb5", "sighting_of_ref": "indicator--d0ccd1ea-6cb2-4a25-bd92-41f097206d4a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36aac67c-8178-417a-bd09-e6df969eb5ec", "sighting_of_ref": "indicator--8f02c294-66b4-4b57-b409-032d9c1978ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb18d49-feea-4e29-a5b8-e85c3bf907c0", "sighting_of_ref": "indicator--688a4b60-b33f-45b0-a234-163191e0a6ba", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fa6c59-3d6f-4522-9cfc-f1700ba67987", "sighting_of_ref": "indicator--34152062-a6ba-4536-a54a-770af15a5b4f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d30d0b7-31b6-4352-b932-fd9811cb9069", "sighting_of_ref": "indicator--473fc3cd-761e-4fc7-ba56-b24905da2679", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6b0afc-26c6-4d06-9ca4-f6631507e4f9", "sighting_of_ref": "indicator--25584c28-8d94-40a4-945c-7301be8ebf84", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef53680b-d466-439d-aaa0-7e16e01a2459", "sighting_of_ref": "indicator--2db703b3-1325-4f4d-973c-caaee6068685", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a3babe-06ea-41b3-be94-126cb31b5f04", "sighting_of_ref": "indicator--5d36c892-e215-4b15-9e01-8adb12fd9c58", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c401f18c-0b79-4651-ba7e-d8aae6738d06", "sighting_of_ref": "indicator--30362728-985c-4b1f-b860-7fc7e8d41a28", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1cd431-9ced-44a8-a20f-ce9761a680d7", "sighting_of_ref": "indicator--b17e8eac-e2ed-496d-8020-d17114b8d34d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e44f47-fb04-46b9-ba4c-e823457519d1", "sighting_of_ref": "indicator--696bd9ca-4b9b-4509-a01d-1dc0a0316e13", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba68ba6b-63ca-4adb-ae36-17831cebe4f3", "sighting_of_ref": "indicator--95b58a0f-12e6-4488-b376-33480e376200", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1139e11-9a3b-48a2-8be5-0e6beacf0f9f", "sighting_of_ref": "indicator--9871f586-67e3-4fc9-96bf-3cb4e92b8766", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80412aef-98e8-4bac-bb09-660618272e60", "sighting_of_ref": "indicator--0145af0e-40c9-42fe-81bb-740b61ab3787", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9df279-756f-40d4-8c56-f21a9c2182c8", "sighting_of_ref": "indicator--f46a15cb-c978-4902-89ad-835de4f6a387", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab3300a-a37a-4429-afa1-7000786ee8f2", "sighting_of_ref": "indicator--3af768e9-00e1-4a5f-be75-2ac9aa528dc7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a46fa31-cc87-4e5c-b559-67be4362cf96", "sighting_of_ref": "indicator--08e4a3c9-3b0c-41ae-9576-0121c020813b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bb965c-980d-4591-941a-73cbc9ffb7f5", "sighting_of_ref": "indicator--6282ee32-6721-4a2b-a97e-404449096cac", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e4104e-79b2-4952-a73d-2c010f634d81", "sighting_of_ref": "indicator--6d6216ec-7552-4525-aa02-03ee7f2ffe77", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9579932e-c192-4ff7-b94c-f83071ad9784", "sighting_of_ref": "indicator--16298568-d666-43bf-8d1c-a6ed8513a6a9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41cd6f8-a39f-4cf9-9868-2b1284265e19", "sighting_of_ref": "indicator--af80a7d4-6132-4e91-950f-8f4cba1c2390", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c545764d-06cb-4e83-ae97-5b6134fc4968", "sighting_of_ref": "indicator--1c5f2d9a-7c1f-40eb-9680-3d2387e53dcc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb46026-c239-470e-aa8a-cb008d1e3998", "sighting_of_ref": "indicator--94213e3a-9d1d-442e-af92-1f5352df75c5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1834d230-58ac-4964-a4e5-a90adcfac163", "sighting_of_ref": "indicator--46680866-b0d3-49e6-ac59-4672f87e8f1a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da9c847-5698-4dc7-8af3-939c012cc137", "sighting_of_ref": "indicator--061cdcd2-291a-4f72-8c37-4461f0df73e0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95e9875-3b60-4307-940e-db608823a7c4", "sighting_of_ref": "indicator--90790198-a214-4fb3-81b1-a08e2989c55c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a4f3e7-fbe7-4ffb-bc39-7eb374d6a3e4", "sighting_of_ref": "indicator--f87d1597-82e8-4f04-adf0-fdc2b41034d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695222d8-428e-4bcf-9ba8-169c80b06a62", "sighting_of_ref": "indicator--cdbd6e43-0f22-454e-b395-7c3210593137", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea81e6c-8a95-4778-8747-558c080962ad", "sighting_of_ref": "indicator--e641757c-be28-45bc-9aa5-32ab3717cfaf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5f67f9-f82d-4feb-aeee-ae52b5a2473e", "sighting_of_ref": "indicator--3b1ec62e-2c57-4d81-b55c-ef85082c8792", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f8745b-6954-486c-bb77-3ad57be1e5e7", "sighting_of_ref": "indicator--9db8518a-1507-4771-a9c9-7db83fd1f12c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66582794-1854-4d32-9eaa-81f4665cde6b", "sighting_of_ref": "indicator--e253c507-200c-4958-8c79-a47074b7b9ec", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d54e808-4136-477f-b745-3ab9fceea76b", "sighting_of_ref": "indicator--39f35066-4374-48f2-91d5-c8aa8f95cd27", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46658929-d06f-4cbc-9cc6-e922f089dbc3", "sighting_of_ref": "indicator--ccda52fe-5817-45b6-b935-0ac3dde09757", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e136d475-bc3b-4240-9bc3-b33e1a1ccf0d", "sighting_of_ref": "indicator--465d5b28-2938-4bbc-bd70-ac6734aa5276", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dac72de-28b4-46c2-8f08-d962a8ed0551", "sighting_of_ref": "indicator--88f7473d-5f11-4220-9a62-2f597dfbc474", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4325c42e-a686-4e00-b0d4-d2884e3963bf", "sighting_of_ref": "indicator--ed5eb0a6-53c9-4473-bd55-8fae74eaf421", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef3ead6-244c-443f-803e-59326a81c0fa", "sighting_of_ref": "indicator--78f554a6-0b12-43bf-baa2-f2f29e027655", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d08eb31-7c80-41df-b6b7-d68cad9392c0", "sighting_of_ref": "indicator--19bf143e-dd7b-49fd-9654-05d7184e0a32", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4680c0e0-0362-4eb9-b616-8ecec141a1c2", "sighting_of_ref": "indicator--d41e3958-a8b8-4220-8ebe-cd73a16c3162", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc54e3a-a2ac-4b78-8941-2cdf814f804b", "sighting_of_ref": "indicator--f39c4209-ca18-4f62-b99e-b4cee5a31535", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fb14bf-939f-41bd-93aa-22e62f32953a", "sighting_of_ref": "indicator--9a99ab6a-5bef-452e-abe3-d7bb7570fe63", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0f399c-1a34-4cb9-98c2-078a8badfab2", "sighting_of_ref": "indicator--6068d534-1a5c-4890-9440-a10f8be1566d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bdc931-eede-41c7-b01f-ddf7c142eec9", "sighting_of_ref": "indicator--d2d63e12-9a80-472d-9aa0-76863089f664", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a876af7c-f0e7-48f0-902b-c6b922c75574", "sighting_of_ref": "indicator--6a2aac27-5209-4c4e-82e3-1c7826b826e1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3192ee-bf33-4d7c-b351-028d973de738", "sighting_of_ref": "indicator--06a36902-e4a5-4754-afbf-7775408256d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7016112d-7340-429f-b34b-4f1dfabce656", "sighting_of_ref": "indicator--b0e9979c-ec42-4d75-8130-06feeeb6cb3b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdea26b3-0de3-421e-be81-db769347adf3", "sighting_of_ref": "indicator--50066d47-a8a8-47b2-b63e-e9d77e4dc93a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4abf3b-b31a-4d96-9359-36def5834e71", "sighting_of_ref": "indicator--7a60eba2-5f8e-4b4c-a2ad-cdd37191d58e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f9fc60-d98d-40e0-9d02-513b0abc6172", "sighting_of_ref": "indicator--d05dcadf-4696-4f96-bcd9-cbf4f6eaf6aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b33cebc-ed25-4bac-8041-bd002afde70a", "sighting_of_ref": "indicator--a14fc698-cd1c-4b1f-9aa3-6fb1c355044c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a2d688-fe78-4561-9c97-cdf3ff1318e8", "sighting_of_ref": "indicator--80cf8a6b-07d3-4fd6-9072-ec5ee4e97059", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9570a5da-9d19-4aff-979f-2cdd49dbedb1", "sighting_of_ref": "indicator--8dd920c4-34e9-4a00-8b99-80568678afb3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6045d35d-7a67-4f7b-b2b9-7d17b134f0ff", "sighting_of_ref": "indicator--5f3d5393-425c-422b-89ab-53208be8f160", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9a8e6e-3b34-4b1c-9a40-fb66012fe55d", "sighting_of_ref": "indicator--5409e8e6-7dc3-4ba8-abbe-013b522346ea", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30016d7a-1cb0-4b10-a75c-b0062f44603e", "sighting_of_ref": "indicator--90a58685-67db-436e-9600-c3923b836b8d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4f98b5-46eb-4932-aec3-f06f6577d71a", "sighting_of_ref": "indicator--0812403b-403b-4ee1-9ddb-5757c16ed2b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574ff738-da63-4df3-bb6a-f98b0d540087", "sighting_of_ref": "indicator--7f903780-b9f5-455f-858e-e060f5a59f01", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49840dd3-b905-4664-9353-9d70cbae1fd2", "sighting_of_ref": "indicator--58d45de8-ec4b-490e-8768-5d067ff33cd0", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b64dfd-6060-475e-97cb-8b674729f814", "sighting_of_ref": "indicator--99fa354f-bfca-4641-a2c1-3c98e2e2a9a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695705e0-7553-4e59-9b3e-cf5f36692b18", "sighting_of_ref": "indicator--8d0bab9a-a4b3-4f7b-9515-8a0df9e1b251", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9004151f-e013-4023-8f79-8ad345b89c1f", "sighting_of_ref": "indicator--8b0521d9-74f9-42b4-b507-2688315cc883", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d50847-5cb0-4c26-9c91-4245d2310ec3", "sighting_of_ref": "indicator--75cd8966-1195-4425-bced-92e7de9ef6db", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586be672-cbde-4f37-9d57-c729e7105466", "sighting_of_ref": "indicator--bafcf287-5b20-4742-885f-e8dc85f896bb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e4c112-059a-4636-ad91-944d5b6c0a80", "sighting_of_ref": "indicator--bc6d0ef4-087a-40ac-90b9-6f84da368527", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624ec13f-b144-4426-9a8f-98d64b81d467", "sighting_of_ref": "indicator--9bd7036f-4177-48ed-9f4a-8be990b6abb5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62ad680-cafb-46d0-9083-68c00d59499e", "sighting_of_ref": "indicator--ce591350-38d6-4bd9-9309-f6e6f4d8490c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7daedbe3-0f69-42dd-84c2-0952486d90e8", "sighting_of_ref": "indicator--ba658488-afb1-47e5-853a-a36671d6a004", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7e6f3b-6db7-4730-b07d-c51cb6bca0cb", "sighting_of_ref": "indicator--5d845a49-3996-4b23-bf93-c0f5d12b4556", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec93107c-97f4-46b5-9f5b-75c9a221765f", "sighting_of_ref": "indicator--5dda94e7-c57f-4cf9-8d4a-dd68d6524be9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1ed1fb-38d6-4735-a8db-6e989db2a77c", "sighting_of_ref": "indicator--850d9f2e-c4f7-4549-b395-ffa1db8a3260", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39bfccfa-9b1c-4863-99c0-480881e42b09", "sighting_of_ref": "indicator--821117b3-51ab-4eb7-98d8-920f1c9ed24b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8a5822-08a0-4ca6-9070-f2be42ccd2de", "sighting_of_ref": "indicator--6ae3f0cd-cc38-48e0-8a96-1b047ebe074e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2350f4df-382f-4d50-a398-011f222ffea0", "sighting_of_ref": "indicator--70d9432d-340b-4940-b68e-12b4d0a77804", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0beb2748-ed82-4099-902d-1ae70cf1bb3f", "sighting_of_ref": "indicator--3d01c397-bce4-4f6b-b278-5a5d65f983d7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c63d636-fada-4d51-b1c9-5b9f0d6b5802", "sighting_of_ref": "indicator--426e6d45-33d4-475e-9f6a-459de2363bcd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5734e4c-9c7e-4137-acc6-fd86be5336e2", "sighting_of_ref": "indicator--466c132e-7953-4609-beaf-36a3e50f9ec9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a114e6-fef5-4fb7-b9e5-a123a07b6873", "sighting_of_ref": "indicator--620f99c1-b9f3-4e0d-a1dd-94290a97db73", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e565503e-14cf-4acf-8977-006bd63fd520", "sighting_of_ref": "indicator--4bf5d562-8682-4fb7-a673-eb7abeed7604", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebcffc9-a350-407d-85ef-5884d757f030", "sighting_of_ref": "indicator--2aa28fc0-1f10-427d-a5df-7dd0a7a27768", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7156743-0ec2-4968-8264-9121ef2c20c2", "sighting_of_ref": "indicator--05294dc9-ee82-4c35-b97d-de21669191af", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1baaa485-b675-4a1a-aa44-95f313a2d946", "sighting_of_ref": "indicator--92116e53-343b-4ba9-8e1f-7ed84d92c4b3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3b5657-83a0-46c9-aa53-c0b67d653069", "sighting_of_ref": "indicator--8a73704f-2138-49d4-b373-9cd18ee67b7c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a3e1b8-5470-4e91-aa9d-7d3f0d20f9f1", "sighting_of_ref": "indicator--46722572-947c-4230-b155-1c0657c4bde9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6452c83d-ceae-4d8c-9877-7267f8652916", "sighting_of_ref": "indicator--36171284-1733-4107-82fc-160c86ffcb55", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ad8ea4-c2e4-4e1f-8003-155211c5b601", "sighting_of_ref": "indicator--8ba3fc7f-10d4-4f17-98ee-f0079c65c9d7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540cdfdd-f733-4535-8f80-27be50398a4a", "sighting_of_ref": "indicator--f7c29cd8-5e99-4a77-80b9-91c037509d8f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69550249-119c-419a-9db5-531e7fa194b6", "sighting_of_ref": "indicator--9a0b7ab0-3182-4a14-9885-e76c592517fd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9ddce0-642d-4a2d-9d4f-ac574ce4990b", "sighting_of_ref": "indicator--d7c3fd7e-b450-4210-b24a-76c98e6f1d86", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490f4c05-702a-4d4d-86e2-9de8e03939db", "sighting_of_ref": "indicator--7e83de8f-2734-41a9-89ee-e389a533635c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1d5f2c-1ffe-4354-a853-fe398cb73db3", "sighting_of_ref": "indicator--8be6e9b6-1757-4f44-93ce-72c9f934cd92", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910e51ea-2ebe-4404-86a1-1fc316727164", "sighting_of_ref": "indicator--c37cef79-4a12-439f-9aae-3262f40bf1a7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd407cc-539b-4925-a389-a3e6aa26ecf7", "sighting_of_ref": "indicator--74c45903-4190-4bef-a1d7-4bc795946a12", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05ec119-2743-464c-8bb7-2a5457756e1a", "sighting_of_ref": "indicator--ee157f07-39d5-4697-a2c0-80090153675f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe102d2-04af-4ac6-9b0d-cbe328e3137a", "sighting_of_ref": "indicator--046c98f6-b722-4b36-a241-09698c442c78", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abeabcae-704d-456d-8846-4eec96406c39", "sighting_of_ref": "indicator--a5bb1ab4-4de8-48aa-88ff-e2a2d9314998", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f283c6d2-a47d-46b7-938b-10019dab62f6", "sighting_of_ref": "indicator--a18779a7-1d33-4331-a7dc-c7a87bb60040", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ef4993-816c-4252-b59e-481cd8eeb650", "sighting_of_ref": "indicator--8151c2c9-3663-42ad-9041-abed9da31083", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4f39cc-9b57-469f-b0ce-0e6c0ee3b008", "sighting_of_ref": "indicator--a6991dab-4e4b-4ef9-85b9-5e83107be93f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17f6759-fcf7-4613-90ad-c68c16ffb987", "sighting_of_ref": "indicator--49db3970-164d-4760-99e2-35bbaf5da76a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad8638c-7fd3-4715-bb06-39378be8939e", "sighting_of_ref": "indicator--54fcac9a-8d82-4cb9-80cc-8542b27a1e72", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2342fe-4351-4fcc-a1a5-bf404d709702", "sighting_of_ref": "indicator--317ba51a-b770-4f10-9cc6-91db82a1d6ce", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f4c84d-e9a7-4ac7-aa92-ff675e55b3e6", "sighting_of_ref": "indicator--de8e7abe-d8d5-40e5-bff9-3379f32ecbf3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb46652-019c-43b3-bb55-feba2fa739d5", "sighting_of_ref": "indicator--fc318c47-e5e2-4c99-afaf-6e301ab6d932", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a23752-7fb2-478e-a4df-3b627cb8aff9", "sighting_of_ref": "indicator--f475cb2e-dc4b-4079-84f5-b558ea2d53dc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb33d0d-2505-44bd-8e21-a155d1d8fac6", "sighting_of_ref": "indicator--521b5665-86ab-4be1-8b3a-597508288a88", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02fc658-bd51-44ac-b352-385d7136908c", "sighting_of_ref": "indicator--e4ca6448-e853-4649-90b1-4c30f029a6cd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f02edb7-d995-4e27-a9fa-1b2fdde7689f", "sighting_of_ref": "indicator--f009229d-756e-4f49-a1e4-dbf34e490493", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f0fe2e-a48c-4fca-9920-ab36bdd11683", "sighting_of_ref": "indicator--cefbd28d-a58d-4e0c-bdad-3300cf5eab5a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa34ed6-7467-4bd1-848a-f3e31e20a1aa", "sighting_of_ref": "indicator--27df2c18-3af7-4c1b-9b7b-1f5bdbfd7d21", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd4d423-60c6-4103-b779-691e596c2cb9", "sighting_of_ref": "indicator--9f407413-ee5b-4671-9def-9ae1a8211f3e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7213da43-de2a-46cf-be6d-58d7a0665f32", "sighting_of_ref": "indicator--49795156-bbbb-436b-98a0-5e1ffe0d2541", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0d0ed7-ca1b-4ba6-a875-32ce4a11028f", "sighting_of_ref": "indicator--46d8b260-fbd5-444d-8d2c-0e5f55c8e712", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2590eee2-6c8a-4622-a584-5424700bd03e", "sighting_of_ref": "indicator--3fd5a726-8544-4ea9-ae6f-06e5ead55e12", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e699401-2c63-49be-a5f2-e33e314afda8", "sighting_of_ref": "indicator--ab1dbb57-abb7-4cf8-91e3-49ebeb077ea4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0946986f-1517-4d7d-b12b-18a95f8d7fb4", "sighting_of_ref": "indicator--c2a1c034-0863-4ef1-a64a-aa6076b9438f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97124e0c-f590-4295-a4f2-d9a92ffa860e", "sighting_of_ref": "indicator--0c587945-823e-4d67-9491-3282d462e6dc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6735144b-f070-4a28-8b51-ad7b4ecf989a", "sighting_of_ref": "indicator--8a5509dc-81d8-49bb-9b80-4fa452159a2b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abee6eb-8046-451e-bc54-05ba05850e6b", "sighting_of_ref": "indicator--8c40f0ca-7aee-4e08-a146-d3f0cf5ae801", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e37d77-6e53-4a83-a3b5-82cb02d66e66", "sighting_of_ref": "indicator--95cd93c6-4e51-40fe-93c5-dd0ee1586b98", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666b7107-83f2-44ec-814c-7c685b45de1c", "sighting_of_ref": "indicator--eecb054f-cbcf-4879-bc88-ed00bd65ea6b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666b5104-60c4-4d64-90bb-4cf004eaf29e", "sighting_of_ref": "indicator--ffbaf16b-7832-487c-a5d3-c4f5431215a1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4532e641-7cb6-42ac-bf13-35b5ce74660c", "sighting_of_ref": "indicator--6595597e-0df1-49d0-8bb7-4fabc6d68290", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c44f6e2-548f-4cac-a7af-516010dd1626", "sighting_of_ref": "indicator--fafa4773-cc61-4566-921f-285430982f8b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f9fa6b-bb9a-4c24-9cf3-e83b2a6f0443", "sighting_of_ref": "indicator--9eebe5ee-f642-4530-a2bf-9f75700d8154", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6adedd-1b63-493e-b34a-29e5152b0ac2", "sighting_of_ref": "indicator--f0b043f9-8452-47bd-ac26-5891589e2bc9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c44ae50-00a7-41bd-b0f5-7cf479690298", "sighting_of_ref": "indicator--db1a71cf-84c8-42f3-8210-6dcfd6409193", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6590977b-7a92-43e5-843d-bd0cb6a479a8", "sighting_of_ref": "indicator--28522a1c-9b00-4b84-9bea-71ad78a616fa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7be2562-757e-456c-bcec-e7afa62f40ef", "sighting_of_ref": "indicator--64971fbb-0e66-4027-8b35-c7a55267f16e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203f98b7-6a35-44f9-a732-c5d396d277a1", "sighting_of_ref": "indicator--ae1d57e0-507c-470b-a9aa-37f0b5d2c026", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05dbe14-113e-4b91-aaac-721b78faf5bc", "sighting_of_ref": "indicator--920c6397-f715-469a-b16c-6a844bb1bf8f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d930e8fc-6617-443a-b43f-b97be48dc39c", "sighting_of_ref": "indicator--9ce80dac-d690-4c22-979f-17d4fe285260", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a752a09d-14cc-4dfd-8e78-7baae8bb3e87", "sighting_of_ref": "indicator--a045a565-b8a4-44db-9fe6-bd0d8df4cd6b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0671c9f4-fcdd-47c2-9b94-98deb2de2484", "sighting_of_ref": "indicator--ce31b161-c229-4d4f-9c93-4633b6f34926", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed20a79-e9c0-4954-acf3-1a6c6e087c9d", "sighting_of_ref": "indicator--07741739-2e17-4eee-94ab-34ba647e5b31", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd9b0d2-bd0b-4556-aa94-fa09c8d77d48", "sighting_of_ref": "indicator--a450aa5c-42c6-4159-b7fe-d546ed2f7c07", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c248a98f-9261-46e4-a6c0-85e43ea52317", "sighting_of_ref": "indicator--c6da2d29-4ab6-4e1e-9e2b-64adb9737630", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e74fd55-9517-47d0-ab72-63b70de2b2ca", "sighting_of_ref": "indicator--3c4c1620-9a37-4f9b-8020-817fcd6f70c6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d4c33f-084c-4dce-9188-aa9eb11f5b0b", "sighting_of_ref": "indicator--0f32df8e-17fe-4526-b8b1-02ff4238e2e2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4823f5c5-f579-493f-b72b-713952699c9a", "sighting_of_ref": "indicator--2e7089b4-3099-4eaf-9368-297dc3b24e26", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e57ca4-5615-4425-8caf-9901a716073d", "sighting_of_ref": "indicator--06219064-5737-472b-b772-c9fb32f3c28d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73832ea-e88a-42fa-9d31-a54bf47fbf6b", "sighting_of_ref": "indicator--7ffddaee-fdf6-4cdc-9ffc-e440cc9926ab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807ac8cd-0a5f-4ea6-8a7c-e3b57f8773ed", "sighting_of_ref": "indicator--1a15c8df-c6a9-44de-83a5-ffdec7a12aeb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521362fe-8306-4ff4-8e65-02b85300a57a", "sighting_of_ref": "indicator--2a5f8055-86b3-4fc7-a12a-ad14f0ce1cdf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b943f01c-29d7-408e-be9a-78e5967d7e6a", "sighting_of_ref": "indicator--51492423-d062-4bcd-8ecc-c346a3fc5efa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f991e0b-ca7a-4da1-b467-04803f4b2c1b", "sighting_of_ref": "indicator--ca0eeaa7-84b2-449f-8491-bf4187ef75a8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e07d79-4d59-4566-8d12-4dc8e458a395", "sighting_of_ref": "indicator--72dbdeb2-bd4d-40c4-8189-245f953cb2dd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f108aa-0188-4393-881e-240965686251", "sighting_of_ref": "indicator--9c1f1ad8-52b3-4200-b9e1-8764694171a5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4bc3d3-994f-48ef-9490-6603627d8e84", "sighting_of_ref": "indicator--7ef17259-f47c-4398-84f9-aabb4979fd5d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851e7f15-6b37-439a-ba0f-46115d3f15fc", "sighting_of_ref": "indicator--8400a626-4494-438a-b8f9-01eff7dac44e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c11e45-4609-4cba-a1e1-c6a66cec288a", "sighting_of_ref": "indicator--675ebc54-904f-4793-948b-a5011e48f916", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a929791c-0314-4cd6-88e4-f17794b79869", "sighting_of_ref": "indicator--505c5c5c-3bcb-4edf-a6a6-1851a7e4817d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3555ad3-cb6a-43c6-8255-adac94b096a5", "sighting_of_ref": "indicator--9762f1bc-3d6c-49c3-8fb5-24b855639c40", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a56cbb3-f514-4d1b-a438-224a5062d59c", "sighting_of_ref": "indicator--15f4c477-ccb8-494d-b24b-06ef5d4a4b08", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5114248a-1619-4bf1-b4f7-c46fbde048bf", "sighting_of_ref": "indicator--b6a9e10a-6cb6-4723-b541-4a36ee26812e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb6056e-2a2b-4158-a22f-438ecd827b16", "sighting_of_ref": "indicator--031fbe91-a0ca-4654-8cab-69d72dc42854", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449d5a33-cf37-4b6f-a8ad-ad036d703791", "sighting_of_ref": "indicator--80d2a506-52e3-4c7d-925b-570c449963c7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b6d8eb-e8c8-4ca7-b9b5-eb50bc9356d4", "sighting_of_ref": "indicator--b5593255-dc16-43c8-aa2c-165b4cf4bd53", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db47797e-be3f-463f-8350-9940a9700cd6", "sighting_of_ref": "indicator--ca2e11c2-ac3b-4969-8e90-a83105a18efc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b63a95-66f8-4cc3-8493-f5f27603aa0c", "sighting_of_ref": "indicator--6500f428-6baa-41b9-8c58-5fda37603189", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dd1f31-60c7-4a8b-ba0b-a96d50c03968", "sighting_of_ref": "indicator--071c3dd1-c1be-4f6b-a315-c23ab071c0b8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f980ef9-876c-4b38-ac30-eeb75ea5279f", "sighting_of_ref": "indicator--9ac41293-9a8a-41fd-8ba4-519b2d57ab90", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368cd844-02db-4b35-9811-4cd12b210fdf", "sighting_of_ref": "indicator--cdfa80cf-1f57-463e-84ee-7db1c54afc5b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fe768e-8290-4721-b332-2eb4ccd6f716", "sighting_of_ref": "indicator--58433316-def5-4f8b-a3bc-af9eb8ca5678", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd542a14-0d52-42a2-8750-07ea1df8bb30", "sighting_of_ref": "indicator--58517797-818b-412a-8cce-28b3c256c2e1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b984ffd-75b6-4658-8c86-f7172992dcbb", "sighting_of_ref": "indicator--9d45905f-e069-4f08-a5df-bef7e8d40d58", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97175638-1d6b-4fd0-93f3-620d3d2263a7", "sighting_of_ref": "indicator--ad21c94d-a672-4d76-af3d-9e8719adfaac", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f63017-5a1d-480b-93c9-053b864bcf91", "sighting_of_ref": "indicator--b16d968c-7866-4065-819d-f7bac0734180", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b06c7d6-130d-41f4-a187-1cf0c601af47", "sighting_of_ref": "indicator--79966682-8f55-4c23-93b3-85fc614cec97", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205ff3b7-14d3-4176-835b-b5a826c2c921", "sighting_of_ref": "indicator--9768be44-c382-4829-abb9-c52b484c37d8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82a55c8-0b26-464f-afe1-9e4a81bfa9ce", "sighting_of_ref": "indicator--34eeb374-16d9-4b97-885c-6105c9c87762", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe742d0-3f41-4b0e-a8fe-47f17d8493f9", "sighting_of_ref": "indicator--d530bc3b-2bb4-4797-9cd3-efeb668bd9fb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d474db8c-5d4e-4453-b0ba-79a7b2695e1d", "sighting_of_ref": "indicator--c27a5c04-a66b-4255-9d82-efb7aeeba272", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c4b0fc-0bad-49c1-9c65-8a394f5ce86e", "sighting_of_ref": "indicator--1548dc27-14d0-4824-bb57-af139facc745", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fda793-8634-4f0a-93e9-4d5c1415bde0", "sighting_of_ref": "indicator--989109b9-e491-4984-8b39-0626cce7cfbb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c396d473-5dbe-4782-a758-76cbc719ab7d", "sighting_of_ref": "indicator--c44b10e3-48c1-4a23-84c9-acc789688da4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0947782-0aed-41ad-a0d9-8e6b755584ae", "sighting_of_ref": "indicator--49b845b5-897f-48b1-89ef-6694d815a837", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fb7bb9-cbe4-4977-b1f2-4b455a731004", "sighting_of_ref": "indicator--53e7f5b0-7c4f-450e-9404-c98edc804a7b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e114a2-90fb-4060-9b46-8231528717fa", "sighting_of_ref": "indicator--6b3e54da-91c0-4f12-925e-ba7d480f9e28", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d5b866-eeea-468e-8805-7bce296d7303", "sighting_of_ref": "indicator--9e4468c9-b39f-4bb3-b5e4-12f2965b8bad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe5989a-e790-4487-b3f1-3bd8f3d2f0f9", "sighting_of_ref": "indicator--10518ab7-d6b5-4152-ab6e-7a23705b054e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccdeb1b-0416-42fc-b66a-4dea22462b0a", "sighting_of_ref": "indicator--8fd46c2e-6971-417e-a414-a2a7b269a425", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6099ffc6-276b-4792-9168-8a69fe64fd65", "sighting_of_ref": "indicator--876c854b-3fb3-4513-80b9-4326ba51cd4f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6c9754-a67e-4ab1-9039-bc302e5f46dc", "sighting_of_ref": "indicator--016e6976-ad8c-455b-8357-a6abc02389f7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c87dc97-391b-40fd-92b4-aabdc1384f87", "sighting_of_ref": "indicator--c781d41f-d1cc-4e3c-b672-7141ba7a796a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa62ffdd-578e-4d25-9982-cdf1e6d36c7e", "sighting_of_ref": "indicator--35dc4e64-0f60-42bf-b107-ae4c6147295b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4641c2bf-cda1-4949-8962-4589244d6f04", "sighting_of_ref": "indicator--b62af15b-cfff-4209-87f6-fc98b3730a91", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd30a2e-3c17-415b-a60d-afd037964de1", "sighting_of_ref": "indicator--6bfd6365-c582-4c08-8a53-bc64dc7b708c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63b099e-0e6c-4e8e-b40e-d828583046b7", "sighting_of_ref": "indicator--6c475386-4e2b-45a9-95bb-5a7402bb7a25", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c886745-8103-4414-bce1-441b82842690", "sighting_of_ref": "indicator--26632dc3-c117-4471-af24-3b2fcf0d4bf5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b74dd5-6a74-4997-9a64-fe2fa23ce9ba", "sighting_of_ref": "indicator--f01c3cf0-21a2-445b-983a-84fa38cff2d7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520c0926-d0ba-4a30-97ce-434f4f55d711", "sighting_of_ref": "indicator--55640682-0040-4ca6-bd0a-0b12dee60566", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7815f6dd-cbf1-4128-a865-a655f1c7e20b", "sighting_of_ref": "indicator--0e8c3de8-add4-4736-bbdc-9130238bca69", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8faf79a4-b74c-4486-b74d-258640a4d33f", "sighting_of_ref": "indicator--ff3a7455-bbb2-43fb-ae4d-ef372f9b27b0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9cd50fc-da72-4e93-ac0e-d39321aaa613", "sighting_of_ref": "indicator--f2fe9290-cbfa-433d-84b9-b1b99420196a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9041fc51-36cf-43d2-bfd7-886fb7d8dd75", "sighting_of_ref": "indicator--e03a1aa4-54e4-4899-8498-be3d86bebe9f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c5742b-5229-40a1-8d70-02299707a5c8", "sighting_of_ref": "indicator--c324e0cc-1863-4d37-bfa1-82e5af98e7e4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d082062-e2b6-4a33-b6aa-5c21d6d9b82c", "sighting_of_ref": "indicator--7e50f503-6069-4785-a8e7-f5d80a4ad256", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd829635-31dd-4f47-a1ff-7f04f15421d0", "sighting_of_ref": "indicator--8d4acd7b-035c-4e52-8616-dd8b1bf22f75", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbff00b7-502a-4155-b93e-5c7ad368ec64", "sighting_of_ref": "indicator--e17dd748-c604-4821-88cc-5802c2226dd0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624f88a2-91ee-4f60-8119-ace5c18b7534", "sighting_of_ref": "indicator--3095baff-52ab-4105-808a-dfb121b7ee31", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a74f1a-03e7-4fb3-ae7a-1e1dc0d9b970", "sighting_of_ref": "indicator--b1d2cc98-a2c8-4591-aa91-b33623ea1931", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f23920-7672-4ead-a843-f297331dc401", "sighting_of_ref": "indicator--3500c518-1cd0-4d4c-a6e2-98c406b6b957", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3281927-ac5f-496c-b50e-78c545f9a42c", "sighting_of_ref": "indicator--28a8d641-4b83-4404-953e-5318b8c87427", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587f407f-4c5c-4e46-92cf-8d6c9194d834", "sighting_of_ref": "indicator--8b019104-c0ca-478c-8fcf-01a0177b3970", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b9df22-f013-4157-a84a-3e16436d408b", "sighting_of_ref": "indicator--93c532be-b107-4c99-ab62-a24a276de39b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f15c649-a699-4e37-b318-d858ccda31e6", "sighting_of_ref": "indicator--c5ca5d50-87ff-4e8c-93a0-5f39d66ede7b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b449afd1-315a-48ef-9950-d47efb4bf7d2", "sighting_of_ref": "indicator--b9b2d870-e456-4e6f-9434-85262ee665be", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409617af-9f0b-4d69-b5be-b1e25bfb2418", "sighting_of_ref": "indicator--48fbebad-509f-43a1-af8f-992aa74ba637", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdbb42ac-1965-4502-816b-39eb26960188", "sighting_of_ref": "indicator--36fcfeb2-bcc3-4759-b28d-82afd6095eec", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0a78a6-14f9-4b8d-9b97-7f2ed4bec8fa", "sighting_of_ref": "indicator--65d48887-01f2-4a1e-b6a8-f68c0131c5ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564cd9cc-81fe-495b-8d71-4799ade71a26", "sighting_of_ref": "indicator--9825c5eb-50f2-4415-a835-33a60fb25dd7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f910e0-8c25-4c1d-99f2-7837009a4677", "sighting_of_ref": "indicator--86a63e1b-f46c-4289-a627-4a18ab0ba109", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54573d8b-5df8-4229-900d-47949429632c", "sighting_of_ref": "indicator--e8037666-7b6a-45b5-a2c3-71e04167255a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd67201-b215-41b8-a994-1526af41ddc9", "sighting_of_ref": "indicator--91e1d0c2-ccfb-45ce-bc7c-a09942f809c3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944e3994-772c-46a5-bae9-3a76e7ec1a1f", "sighting_of_ref": "indicator--f5711b6d-be64-46e3-8c39-dbb5da82f8e2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdf4596-8a66-49b0-a6f7-61a8003b12cd", "sighting_of_ref": "indicator--359706db-9fd9-4300-ac7f-fbe864edf695", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6102c5da-e33a-44f6-8acd-20a72c2c1cf6", "sighting_of_ref": "indicator--506d2636-9958-4d56-b0c2-35c37641f8cd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce53155-41f6-4574-8657-08d3381197bc", "sighting_of_ref": "indicator--cb60205c-b856-475f-9ab6-642fb35f337d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc56bf6-01d0-4f26-bc36-ff2e4174badd", "sighting_of_ref": "indicator--cab4436e-02ec-4c22-b18e-9deab81d2f2e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0079a43-5e0e-43a8-b23a-62e12ce0fa3f", "sighting_of_ref": "indicator--e109b117-e4c0-40cd-9e29-00d0c07ddf12", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d99722a-2779-41b1-b928-072621ed23e1", "sighting_of_ref": "indicator--52aedb60-dd27-40a5-b393-7ec730e47077", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda438b0-329b-480c-b871-26e19ead4671", "sighting_of_ref": "indicator--2d1f2b18-d492-43ba-b35d-4ba2aa831708", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b9984e-0d35-4215-b169-0fda939d68f5", "sighting_of_ref": "indicator--8144e885-5be0-47cb-ae44-57113ada3d73", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099d1a56-4f52-47e6-b4ca-3bc477c768ee", "sighting_of_ref": "indicator--8f941d1c-9b9d-4572-ad13-bd6be75118f4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ff10e9-628c-4161-9a94-c80945132196", "sighting_of_ref": "indicator--0b122dd2-e9d4-49db-921f-a67637b09653", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf94a07-d430-4836-9995-edc95ae63068", "sighting_of_ref": "indicator--9b7d6e99-365c-42ef-8c59-0c2ee95a4604", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d54876d-cc7e-4045-bc01-4a5f3eda1538", "sighting_of_ref": "indicator--ba8d7e70-8d89-4b61-9f11-153f49535383", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31f0541-d54d-4cda-80c4-6d665c1b1e71", "sighting_of_ref": "indicator--894ae91b-4522-4cfc-b517-395e6bab5bd5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9638b194-158b-45b1-9bf3-ea7ee1c0dcbc", "sighting_of_ref": "indicator--4f13be84-166e-4583-8329-a920b4bde1f3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09ad573-0b4c-49ac-812d-392e24b14386", "sighting_of_ref": "indicator--3d0631ab-8c84-49d8-85da-281b5ddd36d3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59c13c4-cc5d-431f-8531-b59894f1ee07", "sighting_of_ref": "indicator--66d30fb4-0032-481a-88e7-c1fb6e1e9e30", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae724c59-12b3-4074-8d65-71d3ea2a584d", "sighting_of_ref": "indicator--d51c0cf1-34df-4f47-a54b-9e3c12983455", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba15b4c-8327-4701-81b4-78aab2e64efd", "sighting_of_ref": "indicator--771b4c59-459b-4d95-a079-ec20fe2f878b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f1fc00-6ba0-4a03-a9f5-6164d61d6508", "sighting_of_ref": "indicator--8b6fef60-4009-4a93-bc2c-849a0c4d1255", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39230e66-7e1e-44d8-bd45-9ab4f7e2a272", "sighting_of_ref": "indicator--add7e7cb-19e2-4e91-86ea-e32054446c58", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f30fe3-0750-4bdd-a0f6-895d54d6a219", "sighting_of_ref": "indicator--3c98dde1-becd-4ba9-b333-58ae40f40be9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc91e726-a953-427c-b6ca-be211212b81c", "sighting_of_ref": "indicator--2a3e8331-7bda-4c72-86c6-547b9d4656a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cb26bc-18c5-45b0-8469-1fbdeb8dd08f", "sighting_of_ref": "indicator--509f96c5-4c85-47da-9440-5b94b1b3649b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ce8b42-cf3e-4a18-b030-04bd57515f38", "sighting_of_ref": "indicator--a27a3bc0-deda-40c8-b592-6b63e7aedfca", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5695a0-1baf-4ef7-ae18-5604c9f005d4", "sighting_of_ref": "indicator--544d975a-2876-4373-a11a-4b5b996a5419", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c96f5e-95a1-4e2b-8a6c-7e55e8c9606f", "sighting_of_ref": "indicator--4c7b4b02-e27d-4927-9a36-b74ccb6cf23d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3253fd-c3ec-4acc-98c2-b1fd3d6204a1", "sighting_of_ref": "indicator--958f2ea8-d9b0-4055-bb02-d95488fcfb01", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b682f350-3901-44ed-91ae-abf77fb18a3d", "sighting_of_ref": "indicator--f02044a2-71d0-4469-b0eb-c48bd235e08d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7537514e-6061-4320-a0f5-2d6daeec074f", "sighting_of_ref": "indicator--ef1c428f-69b4-47e1-84e7-e58d9d0e474e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d91a90-ccd4-4ccd-9adc-77049858994a", "sighting_of_ref": "indicator--da3ae095-86b4-4c5e-9c9d-6528f0976e1a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391fe184-7c9d-4e1e-879e-329879467bec", "sighting_of_ref": "indicator--5b9c5fe8-381a-431a-b38e-d2366f8af3e0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c7d7c9-550c-4eb3-83d2-a2743d7449dd", "sighting_of_ref": "indicator--9a33406f-d22b-4c50-bd5e-a56b35a22c9b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07db8473-c6f7-4431-81c4-2ebc46a31809", "sighting_of_ref": "indicator--6c123e26-7214-4488-a58f-a6c5ef067a7a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6671d917-2b74-48aa-8b24-4ea837d36ef1", "sighting_of_ref": "indicator--f59ca5a2-d10b-4389-b881-03b0f1230785", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360a4828-1bf3-44bc-b0a0-242b3996e33f", "sighting_of_ref": "indicator--ac177629-4d6b-424d-b50a-c81f932c2b4b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8594a4-bea8-45ab-a2e0-2bdc10724733", "sighting_of_ref": "indicator--f3f5b3a4-49a5-43b1-a2e0-753923f41627", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdb1818-7724-4770-ac8f-7fc823d0ebaf", "sighting_of_ref": "indicator--3bfcb916-fc2c-44e9-97af-a07295b99aa9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3495605-fd04-4cb3-8a2e-4643212c3947", "sighting_of_ref": "indicator--30184d6c-9735-4bfc-9331-a0af8b36b257", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647d778a-be49-4d46-831d-1a30d36c43a7", "sighting_of_ref": "indicator--dde24ca5-8acf-43bc-8213-d5ac898361ed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595287a6-72d9-4a20-88d9-112e0e3d83f2", "sighting_of_ref": "indicator--c6dbeb34-1359-48ff-b01d-5611d6f77dfb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ca6dab-b942-4846-a234-f937b79bbbe9", "sighting_of_ref": "indicator--de173840-cb48-4207-8e87-3333b72afa5a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eae2815-1ccc-472c-ac95-7c009f288ffe", "sighting_of_ref": "indicator--e5cbc607-3907-4295-a7b7-bb300e44b944", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e42bb87-3c87-4620-b882-3b378d58bc76", "sighting_of_ref": "indicator--6f0d2f73-518d-41fb-9c03-1f5b33bc9cb1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd7531a-4bde-4ee3-b975-55c27283fc7f", "sighting_of_ref": "indicator--0e5b348e-6c91-4032-904d-8a4f956bd097", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d893b403-42c0-4d72-ad1d-c87528d457fc", "sighting_of_ref": "indicator--63acf74e-cbdd-4926-b4ef-d257494e6dae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f35965-bbb6-40a6-b2b6-f9ff62f1b449", "sighting_of_ref": "indicator--7d824d9b-9a58-46be-ab25-608fcf82e086", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c9ade3-844b-497f-b271-cbfb3aa7a807", "sighting_of_ref": "indicator--5fe5bb67-133f-459c-8682-18b91f933123", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec01f8f2-8f56-4fed-af2d-72bda580b435", "sighting_of_ref": "indicator--338ad3c2-153b-479f-b762-d13ecd009d22", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f01e29b-3dc4-40dc-ad93-480f535a3ada", "sighting_of_ref": "indicator--337fc8f0-203f-4a8f-90ef-ada00bfc7ed6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7c1bf2-082e-4b8b-b033-bc21ea2fb85a", "sighting_of_ref": "indicator--0ad2265d-65d0-43f9-9bce-ecc5c4bed1e1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969f5e9e-68c8-4ff3-a166-d5ba952e49b6", "sighting_of_ref": "indicator--3f88c281-dd15-42a2-a35d-5d1de1d50069", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90120cd-d8e0-4d9c-ae52-c5b7bd6f6791", "sighting_of_ref": "indicator--b82320ba-c9f8-413f-8ceb-1506f44dfc50", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ee7e6a-d9f0-472d-aca9-4362a9ca8ddc", "sighting_of_ref": "indicator--7e9a3f7c-048f-4595-8e6d-f2fd7c0d07a0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086af7cd-8bf6-4463-817d-99a38750c15b", "sighting_of_ref": "indicator--babcfa4a-a968-4612-b269-c49cd8839a26", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9ca2dd-f5e2-42d6-93c4-64f533e67872", "sighting_of_ref": "indicator--ff66e167-dbd9-42a0-aa42-d65736417b51", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd43a59-895f-4fc4-92f7-c6e12861c4ad", "sighting_of_ref": "indicator--79b0a74f-83a4-4a6a-8cf1-dbc06d73909b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655c0774-703e-4ec9-8618-d0c8f845f59a", "sighting_of_ref": "indicator--c8080eba-c086-472c-90a0-63e2af89bec0", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b985ec57-1c69-4534-a20f-1aae24e54e2d", "sighting_of_ref": "indicator--2879a7f6-f5ec-4626-8bd8-5241125c7596", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130cf7ec-4ac0-4b9b-a4d1-fa0ad56bb816", "sighting_of_ref": "indicator--099dfa13-a5aa-4060-b86b-49e5cb7113d7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96833f9c-c735-476c-87fe-34e8c2830b13", "sighting_of_ref": "indicator--944d9c95-aef1-4b4d-9878-b21824ae82a0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece64ada-932e-4811-b1d4-ef8edee86ccb", "sighting_of_ref": "indicator--2775e3c3-af7e-47c0-ac45-2287b8a199c4", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40a59f4-ef02-4c7e-9b48-40b1d29325ca", "sighting_of_ref": "indicator--bb38bcdd-81fa-4988-b589-b3fdf0033d58", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c69c78-6d56-475f-9f0b-eff6a862d4f9", "sighting_of_ref": "indicator--198daca6-0897-41a8-99f8-3a58c5bc53e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743c026e-4424-4d34-a9e4-044832a3e3f8", "sighting_of_ref": "indicator--b1e32c19-e7c6-4512-a1b9-9e5c9c90cbc4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771dba90-6af2-4f31-abed-04abc049b9d1", "sighting_of_ref": "indicator--35a9f76b-487c-4fb0-ac06-ef8b7a3b0b3e", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6f806f-7277-42fd-ae57-afab672f492d", "sighting_of_ref": "indicator--1ecc94d9-3424-4828-b74b-eca192595339", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0eabbf-ad58-4629-a3de-2f1307f6d996", "sighting_of_ref": "indicator--6c1f7778-fd3e-4578-852e-337df7343e25", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c68bf0a-e6df-460a-8f95-ca01523ef5e3", "sighting_of_ref": "indicator--50528be8-a612-40c5-83ad-2656c1fe8b81", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f79e3c-016e-438d-8fbd-4039b8b84d90", "sighting_of_ref": "indicator--4a7055ab-1630-4f4a-b153-acab7f1aeabd", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd4de9e-36e8-4c18-b3ee-117eacd03d33", "sighting_of_ref": "indicator--fc87f557-0fef-42bf-af44-b386315c96d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e82892-623c-42b6-84d1-ada880db4c74", "sighting_of_ref": "indicator--576ffa65-5970-4de0-a3a5-d7b1e3a89ef9", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ddb087-5c77-477c-961e-b801f02b15de", "sighting_of_ref": "indicator--c063e843-c5a0-4534-880b-ce4bb3544d8c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9a2b48-a1b1-4a2b-8da4-393e5c53157e", "sighting_of_ref": "indicator--1ded5d64-1363-4577-86a2-c5ffdd9f5348", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360a86f9-abb3-4e83-9f02-7306da3e0aad", "sighting_of_ref": "indicator--d54e8736-854f-495a-9a47-9ba053fa0741", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba355f4-3312-40fa-a683-47b4aca67ca0", "sighting_of_ref": "indicator--e798939c-5c82-4b55-b056-308005c1bbdf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244dd395-678e-4ec6-9ed0-3f4f7a518a17", "sighting_of_ref": "indicator--86dc4983-e0df-4618-ad8d-ad870a0acb5b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9eb080a-26f5-4ee1-948d-0e04ff8322e0", "sighting_of_ref": "indicator--7239dbfa-19b5-42d5-9827-3cecf4a1a21a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd6735c-aeb1-4579-840c-44058060fe88", "sighting_of_ref": "indicator--bf18cf4e-5afd-412e-a1c2-671032221e2c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecdb3f4c-0c35-4a78-93fd-3405b2b23414", "sighting_of_ref": "indicator--598e7db9-9833-441d-b9b5-9c0feb435947", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607a71b0-7e88-4043-8953-e5b1770b331a", "sighting_of_ref": "indicator--87a88dac-707d-4a99-aa41-9771db30df56", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8833260b-b090-4ccd-85b3-3d4587a7dd1e", "sighting_of_ref": "indicator--5d51e7bb-4a53-443e-b368-2d644d058d5b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7bc85f-724b-4c0b-8977-2f568a4064ee", "sighting_of_ref": "indicator--5e4ba018-0742-46c2-b121-cea3feab40e7", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d979cf52-3112-47f0-be2d-ac1acc638867", "sighting_of_ref": "indicator--20fe95d8-01b0-4a35-be39-b4d60bd31877", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b07516-01e0-4c30-adb5-6afc9d438ab7", "sighting_of_ref": "indicator--9b1182dd-5b23-41e7-ae04-9ab10d349521", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd045062-05db-4d76-b9fb-0249ab1395d9", "sighting_of_ref": "indicator--cd06ca85-284b-4f28-9db0-2470c9d90d60", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725f794e-a362-43fd-9129-cb8d0c457526", "sighting_of_ref": "indicator--d378783c-49ce-411b-aec1-2f6fae7d038c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74bd891-182f-4b11-a122-e4e650e0911e", "sighting_of_ref": "indicator--bd70d687-0676-4946-b716-643ffe4aa160", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253a74b2-02e7-412c-9d74-9e02809c6796", "sighting_of_ref": "indicator--081ec4d0-1618-4ea7-855e-ec5439c136ba", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7124c8e3-957f-4b71-8a40-79b46c8cfcb2", "sighting_of_ref": "indicator--f71dc9b5-2674-4881-9edd-2cdab3aa93e3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe31a6c-fb46-4a76-ac71-a2bd235cd3c9", "sighting_of_ref": "indicator--c80364d7-3fed-469a-af4a-91d8994591aa", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4b700d-61f9-4cdc-85da-bb2720f84208", "sighting_of_ref": "indicator--9a4f3fc7-99e7-48f2-83fd-0726f057c86f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffb553b-2d44-4267-87a5-fdc199b601ee", "sighting_of_ref": "indicator--952cb913-4c34-4c36-badb-31ddbc068ed3", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cae4d3c-6d1f-4505-b84c-14b97522cc31", "sighting_of_ref": "indicator--42c32200-2159-4557-ab66-2f6e32e7db02", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1cec5b-4ff7-4738-8ada-9ac21e03ca7b", "sighting_of_ref": "indicator--e3cf312e-e093-4d82-bb94-7bf6895b8fab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2b4685-453b-4ed6-8b25-c2ef9ec7b859", "sighting_of_ref": "indicator--15d4cfac-0607-44b9-9b5a-b30962636624", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9f3f8b-30a6-4671-8e3e-6bb5720ea115", "sighting_of_ref": "indicator--600866b8-bb4e-470a-bb31-f0f86de1afc2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418467c5-8d7f-4e25-9c1c-4529e561414e", "sighting_of_ref": "indicator--f5e87765-a44d-4581-b236-89ed0a49b2d7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169c5784-059d-4455-b396-34c9612e560d", "sighting_of_ref": "indicator--5010431c-935c-4686-a299-598c3990c7ba", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fea587a-e289-4209-90ae-74723de89d69", "sighting_of_ref": "indicator--a6d39f2c-9c0c-478f-b62e-3c674fd417a8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb5b6ae-b138-4342-b34d-df77fc98c21a", "sighting_of_ref": "indicator--850be91c-996d-44ed-bbb0-f45258a592b4", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38869f11-7865-4a02-8171-f9534a044321", "sighting_of_ref": "indicator--c719eb84-132e-4986-a9d2-ed3c58aa06ba", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22737e06-7c72-4189-b10f-035b1764bcac", "sighting_of_ref": "indicator--93f6d2c0-847b-4f7f-b610-7e5697cf25cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e2e60f-6ac2-46f5-946a-48fd22c9a793", "sighting_of_ref": "indicator--8b6d690d-57f1-4fdc-ad7d-b54557137394", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5379dec7-ad01-4e0b-8257-7b1c1643f073", "sighting_of_ref": "indicator--8b1d822a-2967-4cbc-b769-1a1571e7b6cc", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04d92eb-0e66-442d-a578-d2758046394a", "sighting_of_ref": "indicator--d04f3f00-c2e4-44c6-8dfb-fd71648ec6ce", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa02875c-74f7-48f0-a66d-acf710340eea", "sighting_of_ref": "indicator--f0e54d9a-a946-4e9f-80ba-319eb80f594f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18107a8-4636-41b6-a1ea-d21e6ead6492", "sighting_of_ref": "indicator--c7cf2f3b-e52b-4a07-82c2-db0fcb67e3b7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c59e60-db65-45e9-8694-52a98d023c2f", "sighting_of_ref": "indicator--b349ea90-bae5-4dc1-860f-41c9736070c4", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a04668e-1161-456f-9dce-e8938f0edf03", "sighting_of_ref": "indicator--8f62088c-e4c2-4958-98b6-631ceeec13e3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e155ba03-423a-49af-a64f-cd69640f7732", "sighting_of_ref": "indicator--c1ed7c7d-3e8d-41fe-a90a-2497906b1c62", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a4ee2d-7ce3-4abf-8a49-883260d8d1ea", "sighting_of_ref": "indicator--9b13ada1-b2fd-41fd-88ad-41d509c0abee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e7d846-3d6c-4244-a9a2-ea9d5c7dba07", "sighting_of_ref": "indicator--69688f69-417c-47e7-a915-cae9d950658d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837d1548-b58c-4d57-9fe9-efcebba6aa3b", "sighting_of_ref": "indicator--cb71dc38-6452-4389-80b3-47b891203c14", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c98fe3-756a-44f3-977c-1846cfcbcbb0", "sighting_of_ref": "indicator--ceae331c-c612-4612-ab9f-bbcb7e9ad834", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0def46c3-5887-486d-97d6-e1046d458b95", "sighting_of_ref": "indicator--48d881ae-b2eb-4d32-9eda-7f61c3d2ba0e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71a5d29-da6d-4d24-b66f-81b507532ef2", "sighting_of_ref": "indicator--f44c2521-b940-42b3-85c3-8c0bc8448beb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1fa771-c808-4892-ba5a-767216497402", "sighting_of_ref": "indicator--5345eefb-173d-4fb9-8737-008532fcc5d8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2755f11-2aaa-44ce-90b9-1e8e8fa16656", "sighting_of_ref": "indicator--8c1a5819-49a4-4dc5-95f0-135bda49416d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7bb1dc3-056d-45e2-ba48-6c1d289511eb", "sighting_of_ref": "indicator--eb924051-7dec-464a-b907-6555c21aa9b1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71760b34-4456-49e0-9950-55db94f732fa", "sighting_of_ref": "indicator--329adcae-287f-4b5e-86a2-d5e6aa33c65d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d83804-e2d5-4f6c-bfff-8cb62f538b04", "sighting_of_ref": "indicator--475b6619-5419-4d06-80db-4226235c228a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ae9727-2a6a-402b-8c42-773fa5644404", "sighting_of_ref": "indicator--2d6502b9-631a-47ac-9c4d-60152fd5723f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71488f53-24b3-45f8-aa6b-de1fbbd857a5", "sighting_of_ref": "indicator--7480aa44-d360-48a2-839c-d33181e09692", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699aa467-25c7-4498-9b7b-ef9d7157a2a7", "sighting_of_ref": "indicator--95e0baae-3e93-4a6d-b834-96e63542bb7a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e73db6-b771-45f3-a64a-95f7e804f7cd", "sighting_of_ref": "indicator--464c1049-cf38-45da-adc4-6fd5173cc3a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4cc6f97-da84-4b16-92ed-b3b99dc20321", "sighting_of_ref": "indicator--cb846bc5-37c7-4c3b-aa7f-90707535a979", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a42f8f9-0c39-484a-b275-3cc2434950be", "sighting_of_ref": "indicator--4bd7d4a1-bc42-449b-b89f-8c7129d5fefb", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245b29ed-99b0-4cf5-9e3e-450347eb56b7", "sighting_of_ref": "indicator--70f0c7fa-7309-4fea-89ae-58e6db04c3cd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3faf40-1939-4fe9-b9fe-0a85dc1ce70c", "sighting_of_ref": "indicator--d25d5c12-ef02-4d74-9211-23ff994082b0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15368fcb-efef-404c-8749-03fa406d8a6f", "sighting_of_ref": "indicator--91589d81-596b-40b5-bae8-d67c04445357", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef777a11-8450-4f85-8344-d45bd4e654e9", "sighting_of_ref": "indicator--22367c8f-bf58-447f-9c04-4d3ce88792d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c14e34f-806d-481a-98a9-f032e9ff8f1e", "sighting_of_ref": "indicator--678ad736-5f94-410e-a6b8-941219e5565a", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f12220-1924-4117-a62f-3995012284a6", "sighting_of_ref": "indicator--58d413e7-b63b-4fd2-8784-47e7d6f53251", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611696fb-423a-4a1c-9284-82bfe18d8e31", "sighting_of_ref": "indicator--f291e9d5-1daf-4861-9e01-7a02b973156b", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa770416-11d1-4106-a5d8-0c39e030be03", "sighting_of_ref": "indicator--76b99729-493e-4cc8-8093-aa4b83b06d54", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a12fba-acbe-4733-8ea1-69963db5a32a", "sighting_of_ref": "indicator--03d5f086-9989-47e0-b5da-85fde19a34f3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761393a0-ed6d-4ce4-ac18-79e467bb6ebc", "sighting_of_ref": "indicator--140fbb4b-dd0d-4ee5-80d7-72b0313f827c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691a4094-f2de-40a1-8e0a-f92173ef0274", "sighting_of_ref": "indicator--950723d5-a255-49fb-8029-3d91f0a27d0b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb96ee1-e223-46fa-bbfe-6bd76edf6754", "sighting_of_ref": "indicator--3552f29b-5d37-4e84-a00d-4e6fa6812e39", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1cdc18-d892-474a-9d7b-9ddc5c977561", "sighting_of_ref": "indicator--2da2d26c-d462-41aa-84ec-b7360a7d37d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69520d51-e51f-44d7-9dcd-4d9d003b7c57", "sighting_of_ref": "indicator--93b5c35a-5208-47fe-b175-a5ce4ed107ba", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaea18d2-7749-4c6e-bbe0-63f4b689c573", "sighting_of_ref": "indicator--ae769ccf-16bb-454e-8aa9-42b933cf78a9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f18cf34-7725-4fc1-8772-a87793a2f095", "sighting_of_ref": "indicator--1d48bc25-b3cb-4042-b44f-ced641742c62", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802d0744-658f-4f52-be03-4a5b7ed93c2a", "sighting_of_ref": "indicator--ee1528f8-32aa-4ad7-92d7-347d25ba291f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a1bb20-d10a-4210-82e1-21e33a7d558c", "sighting_of_ref": "indicator--bbdf777b-a2f6-43c9-85e9-678ddb0a2d6e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5829949f-c9b4-4658-9a3c-7244cafad0dc", "sighting_of_ref": "indicator--e8983884-0a7e-4aff-afe4-f14c716ccdf3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9a249c-2ae6-4ac2-ab6d-e5e172103e19", "sighting_of_ref": "indicator--c64837ab-ad91-44ac-9e68-2bab31bd5f9d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8bdf81-88bf-438c-acbc-4169899c1d7e", "sighting_of_ref": "indicator--dc78c958-6f96-4128-b535-c8200b673881", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40d1b0e-ed70-45dc-81dc-1ff2f204cbb2", "sighting_of_ref": "indicator--6393ec5d-c29e-4e04-a55e-ad7d0e608c70", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98eb5d36-6eb2-478b-9c12-eb716a1c4c3e", "sighting_of_ref": "indicator--807cd9f9-e25a-43e8-89f9-77298d6f7981", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54582095-46aa-4653-a863-8e7342e7d61e", "sighting_of_ref": "indicator--45944c6c-135f-444e-9bdd-2e7d4e418180", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c82ee5-14b9-44f6-ac00-0fbb5445ae73", "sighting_of_ref": "indicator--6ce7ab24-07d1-4798-ae04-cff3bb16d557", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b686952-38f7-4554-9e9d-a0d49c49eb66", "sighting_of_ref": "indicator--ab2f5a67-ed60-4192-997e-95d1c302dcda", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fb5e43-4f47-4d4a-8edb-6ebf7f9b42cf", "sighting_of_ref": "indicator--e9440e6b-4668-4552-b1cb-67962f7fa0f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbe6492-4554-4310-8974-19faa317770f", "sighting_of_ref": "indicator--2a3bdcfd-98f0-446e-86a0-990f7d568fdf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f574474b-81d6-42d7-b4ed-1ee84dae73b1", "sighting_of_ref": "indicator--ca241a51-54b1-4c61-a01f-1d9ac29bc79e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52d3dc9-43c4-451b-be47-b6e813dfa45e", "sighting_of_ref": "indicator--8ffcb037-d76d-488a-a88c-1459d6486927", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3105ac4-de9e-4b9f-b67b-eeeedbc5bbf0", "sighting_of_ref": "indicator--bf653bc7-e33e-47e7-89ec-731248e97b56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec1530a-d865-482c-bcc3-5e74dca56e8b", "sighting_of_ref": "indicator--9a8206ac-d103-4f5d-bef1-b54914c8cf03", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7ae73e-2cb9-46f9-9cd6-3cb214b11dbc", "sighting_of_ref": "indicator--b544852b-367c-43b0-86e9-2654ffd23053", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a8e4ed-b0b5-41ea-a124-767bef8b4f0e", "sighting_of_ref": "indicator--6960381b-a573-4858-939c-c9b7e6641be7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819a8de2-76e6-4b44-8a95-9f492d7a23f1", "sighting_of_ref": "indicator--831f4843-5c26-4d06-b3bc-17bf06da15f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e43417a-79d9-4c89-bdb8-a31619129333", "sighting_of_ref": "indicator--0b0acc50-edc0-4a9d-be72-b11e785005a7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2d8d77-47cc-448c-8f5e-5461c77d1ffd", "sighting_of_ref": "indicator--5f4b394d-e0b8-4aa9-9584-35c6bc443101", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa647a4b-9d2e-4f9c-a7d1-6b535c6a14be", "sighting_of_ref": "indicator--0fa8136f-6241-44bf-a968-96a4e0119285", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c66ca82-7804-4738-a792-1ed9cb4e428e", "sighting_of_ref": "indicator--3bd86f85-96a1-4f57-b3f7-a33a68051ab6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6630ca5a-5c07-452f-96b2-d2ae5f885ad7", "sighting_of_ref": "indicator--1f3b86ad-e9be-4650-b358-70ed86d48c17", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a0e521-a7bb-467f-84a6-11fb9ff10a32", "sighting_of_ref": "indicator--ae32b356-5489-4413-925d-7d83046ae71d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7365840-5760-4dc2-a56a-776ccdb84ce9", "sighting_of_ref": "indicator--2c0245d5-15b5-490e-9b6d-f287330e321b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66282243-58d7-4c72-87e1-5d222f0175d2", "sighting_of_ref": "indicator--197daf3a-a50a-4e80-a877-ba36d6869d0b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9debcead-54fc-4515-ad7e-d6ac17a7e48b", "sighting_of_ref": "indicator--0a197980-1c61-4c6f-a09c-81a3287c6ec2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a43386c-73b1-4005-bfde-7b59bcf35e51", "sighting_of_ref": "indicator--9491ea07-aff3-4609-8244-49f4e266fe04", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ce7caf-63c5-400a-8664-b3508ddf1a37", "sighting_of_ref": "indicator--ffd20fc5-492b-42e8-83cd-f3f1ec495658", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3f129b-ce4f-4a34-ab84-75f501e7dfb2", "sighting_of_ref": "indicator--c0079b71-e8ad-4919-9fe6-896b3116e4c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887a9a5c-e053-479e-8156-d6d0aba74218", "sighting_of_ref": "indicator--7049528c-f1cf-4ddf-9d8f-798e5a0056e8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d1a587-5331-483c-b52a-6357fe423a35", "sighting_of_ref": "indicator--6445c58d-51ef-4352-b2e2-417f396006e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f792d04c-e2bc-4537-b969-9b98789cc5f1", "sighting_of_ref": "indicator--54cd8da7-8293-4cce-849a-3c4ced9b3982", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682fe528-8167-41d5-8122-509585016b2e", "sighting_of_ref": "indicator--ea81574c-f37a-4799-99e4-ff02f11543bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c1fc5a-47d3-456e-8cae-a4ae7503b935", "sighting_of_ref": "indicator--ea2a100e-58f7-44be-be99-7f4cb242fa4c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ce1f22-e8f5-41ff-96fa-0830681533e7", "sighting_of_ref": "indicator--634019ec-5a8c-46b9-9fbe-14cf766476a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3b38ce-fe30-4b0f-bbd8-f2be3bc7ed9b", "sighting_of_ref": "indicator--5146bc79-a097-474f-93ed-ded190469a36", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c95fb4d-7702-4174-b89b-8a436a0777d2", "sighting_of_ref": "indicator--ab3c401d-6328-4783-be46-f75ec6eff4b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67104ecb-51fd-4937-95c5-8199e90e8b46", "sighting_of_ref": "indicator--e775a6f4-001c-4cc6-ad7b-0db21ee6456d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9855d12-e2f1-405e-ad2a-fde99e720529", "sighting_of_ref": "indicator--9e5cfd0b-614b-40f3-9d9c-3b6e949bf134", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91909fba-dd6a-4325-b5dd-e34abdcdd4bb", "sighting_of_ref": "indicator--d7a6e6a2-ea37-496c-af84-8a1b52afb5bb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a40e733-785f-49e0-b270-21bcca6b4b8f", "sighting_of_ref": "indicator--38291eaf-1928-4568-86a4-2c967173ea4b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15122101-cf21-4a3a-8d7e-36ce3678e186", "sighting_of_ref": "indicator--fd2ecac4-94c6-4908-ad37-46586b7562a0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198a1e7d-c016-4ac3-ab17-f3016bf582ba", "sighting_of_ref": "indicator--09128a1f-c8f9-4b32-8535-77b79fcce84a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d711fd8d-0ffd-49d5-b503-44d78f1ae128", "sighting_of_ref": "indicator--b8c8ec29-6a04-400d-b86b-06a29cad450f", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8b79ec-684b-4569-b218-e80a93e8fcc7", "sighting_of_ref": "indicator--bd497ced-3dcb-4d6f-a761-606846aab2cb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2ea8a2-0918-44fa-bc31-1879d16e1177", "sighting_of_ref": "indicator--35423a6b-528c-4694-8296-8bc7fda398cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12aa5983-8090-4255-ae50-febf38c785f4", "sighting_of_ref": "indicator--489e914d-17a6-422b-80b9-ce19f14de593", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e343f222-b8d1-48b0-a239-6d7a09ba2c93", "sighting_of_ref": "indicator--88d29f9f-8bf0-4b58-9e96-aa9f2ae252c3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3047235-7604-4eb1-9671-2443f99c8410", "sighting_of_ref": "indicator--fe0cf363-b992-42ce-967a-bd17baef8a48", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318d4431-278f-4184-a074-03d2c6782622", "sighting_of_ref": "indicator--884fc1a3-4b28-41cd-a7bd-993e6d994ba5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df66875d-0a54-42d4-b748-7510e1d9fe89", "sighting_of_ref": "indicator--1ac5a7d5-4058-4661-be0c-f223232779b5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3999c91-7e61-42a4-9edd-0507b0642326", "sighting_of_ref": "indicator--ccf731b5-5d31-4220-a77a-dcfd4afc5762", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286448df-6fa5-41f4-94bf-2d5c2e3bb131", "sighting_of_ref": "indicator--8eae66b0-f1dc-4870-a71b-f6f632eb7186", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7c65ef-2098-4a45-afbf-733be708107f", "sighting_of_ref": "indicator--34bfe43a-acb5-48a7-9ad0-409851adace0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddacdbee-03ce-45a8-90f5-4de0d6440560", "sighting_of_ref": "indicator--3d980585-f604-41dd-bea7-f979d95f4338", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0741fbae-e50a-47f9-913a-ff1c05d83495", "sighting_of_ref": "indicator--3b3496a3-44c2-4f76-8253-fd0d426aeec0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8f035c-b6a2-4814-8537-f724306b1819", "sighting_of_ref": "indicator--3a93c5d4-13ba-4314-b13b-cc7fcb24896f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1941aa-1936-4c3e-a384-6673400294c6", "sighting_of_ref": "indicator--894a43d9-16ac-43ec-9a04-e7c39979ec19", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3daaf9f8-4355-4379-8489-2a091d0e0c71", "sighting_of_ref": "indicator--ed68953e-9dc6-4dbb-9dcf-12fb2ddc6893", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf3b6d6-8e1f-44e7-af9a-fde8d405f2b6", "sighting_of_ref": "indicator--ad911b67-5565-41f2-9a8a-cbab9a8299cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed50e70-22e6-431e-9994-e01dcbb0de42", "sighting_of_ref": "indicator--16c9aaf5-30d6-4150-b172-9d0a23baf828", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3164451d-aae0-487f-9524-d526ede4917b", "sighting_of_ref": "indicator--16c9aaf5-30d6-4150-b172-9d0a23baf828", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bda98e3-60d4-4bd1-ab62-2b98cea79114", "sighting_of_ref": "indicator--16c9aaf5-30d6-4150-b172-9d0a23baf828", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa7d344-1192-44f1-9e96-09e284e8971e", "sighting_of_ref": "indicator--6e924549-09ac-4380-8ab4-d370f20dca42", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fdd70f-7c0a-4638-a7fe-1fc038d3ef10", "sighting_of_ref": "indicator--6e924549-09ac-4380-8ab4-d370f20dca42", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15983cb7-8435-4b0b-994f-f9da4d60bf91", "sighting_of_ref": "indicator--6e924549-09ac-4380-8ab4-d370f20dca42", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ee33ee-61d8-4bf6-b9a5-b03d0c3fc7aa", "sighting_of_ref": "indicator--69e15473-9683-419a-8190-c283966e1ee0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af90a61-750a-49bd-935b-0bdf8c87c226", "sighting_of_ref": "indicator--69e15473-9683-419a-8190-c283966e1ee0", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4627acc3-0962-4ceb-8c0c-d93cb89f5e9b", "sighting_of_ref": "indicator--69e15473-9683-419a-8190-c283966e1ee0", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e21bd43-ed47-4a63-a5d3-9a4dabe6c616", "sighting_of_ref": "indicator--2fcc8648-dd04-4473-b993-f14e2e81de75", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0467cd68-8c4b-4faf-925f-212863697e69", "sighting_of_ref": "indicator--2fcc8648-dd04-4473-b993-f14e2e81de75", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628a4c0c-8cf1-4222-bc13-607e344ccbd7", "sighting_of_ref": "indicator--2fcc8648-dd04-4473-b993-f14e2e81de75", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ab067e-d3ee-45c4-8436-be0e953c9586", "sighting_of_ref": "indicator--a2afb36f-839d-40da-a0e4-96fce28b481c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ea7085-1268-4d31-8751-74d8330fee21", "sighting_of_ref": "indicator--eb22ea4a-e718-4f90-b7c0-4e88fb346048", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26f2f82-0458-4796-a077-7560efeab63c", "sighting_of_ref": "indicator--776c2470-a4ed-40d6-86b2-aed95729f210", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5ebcc9-3301-45da-b90c-fa5aa96f8818", "sighting_of_ref": "indicator--e67d194d-866a-43e3-bfba-796ebeadbbde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7db8dc4-65ec-4012-9201-b37b77cc2cd3", "sighting_of_ref": "indicator--5d1ee528-9e9f-48b8-8116-fc8718165e84", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f5e988-ddad-4602-a4c7-71bdedfc0688", "sighting_of_ref": "indicator--5d1ee528-9e9f-48b8-8116-fc8718165e84", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0cfec3-07c6-4bd0-9584-7fb406cb0d69", "sighting_of_ref": "indicator--cf2222cf-d5b6-4cdb-9a44-ab4c73b8c40e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe3da12-b565-405c-89f9-6178ee0846fa", "sighting_of_ref": "indicator--b5297ecb-46e3-4ab7-b7d9-ed7a0a140a59", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf84a364-7da3-48c5-83c6-f474b95b8a6d", "sighting_of_ref": "indicator--77e42107-130b-4e67-9027-93d2228565f0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61db0697-931c-40f1-92cd-53d84c932fdd", "sighting_of_ref": "indicator--ec36b418-1b45-4bc3-82cf-80a6cee465d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c32c94-5ae1-44c3-8ad1-6c56933d901f", "sighting_of_ref": "indicator--91146310-15a1-47c5-87b5-862de11a63f5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df5be12-ab22-4d65-bb94-ef4bd882a2af", "sighting_of_ref": "indicator--b4e46c11-1206-4dfe-b524-59597f7dc420", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f6c6e2-6037-4d11-9b25-c0c27e423040", "sighting_of_ref": "indicator--870d849f-8c0a-4949-b7d5-037059455656", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c47494-4035-4219-be98-bc9e6b794154", "sighting_of_ref": "indicator--baa4b621-2eab-4441-971d-e15b068d2e3f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4acae45-9e2d-42ce-8c10-6672cef5ffc9", "sighting_of_ref": "indicator--4e159b80-0f6f-4a94-aaaa-dd914d2a2129", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90328610-307c-4750-b2fd-d65ee7f69e8a", "sighting_of_ref": "indicator--b09a3762-3f25-439b-b987-ae6c354154f9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca59aad-569b-41f3-bcb0-d9b57798c40d", "sighting_of_ref": "indicator--597bbca7-3d3b-473c-9f85-2a22c23c2b87", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90235fd2-0278-48cb-842f-154a3c6f4053", "sighting_of_ref": "indicator--c7eb639b-ca61-4368-9ea6-e9bc102be59f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84d10b7-0101-42d2-ae7b-2470c6ad7e1a", "sighting_of_ref": "indicator--f48c983a-56b6-47df-adcf-c26ceefbcf5e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6730979a-0ba0-472e-affa-33bfa39a1286", "sighting_of_ref": "indicator--32f87c59-a75c-4fbe-ba9f-987fb6595bc0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22046c84-9128-414e-b2c2-d1285f45c0e8", "sighting_of_ref": "indicator--9a03a15d-414f-4874-b955-26b74c443874", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfe701e-5921-41b2-b242-c9b4d17c4cd6", "sighting_of_ref": "indicator--cb7e386b-e190-4219-88a0-fafaacc72cfe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fd5681-ce7f-44f2-af6d-5f66e3567318", "sighting_of_ref": "indicator--814ec6d4-9bc0-407a-a9e5-7d39368af6e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3fb714-ac18-4a27-9c5c-283aa8a1ca22", "sighting_of_ref": "indicator--c2571540-afe3-4213-8d07-3f3d735c4149", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd822e46-9ce1-45e1-9076-158c2fbaba1c", "sighting_of_ref": "indicator--a53d93c4-8636-4e2d-8a57-f6811a2803ef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943f277f-4ef4-49d6-bb71-c429d8b2d78e", "sighting_of_ref": "indicator--e39c8c35-eb94-4b81-80c8-58262af29f24", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5dc2bc4-b1ce-4ddc-b67e-93274cd7869f", "sighting_of_ref": "indicator--3430e863-7818-4608-a6be-70c591637d4a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5210ff5d-805c-41fd-9557-c6c39916a563", "sighting_of_ref": "indicator--d72531ce-136e-4cf1-8b13-d10cf411c3f1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ddf3861-803d-4577-bdfb-9b5add58b724", "sighting_of_ref": "indicator--d5eb63d7-b63d-41d8-ba50-deba59c7be72", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2841fa-17df-4c05-a21a-a729769384c5", "sighting_of_ref": "indicator--bac8d241-f719-46b5-82b5-70b08e75d9a0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a26cf8-7350-4f35-a330-dfd4b432eb10", "sighting_of_ref": "indicator--9be6e2c6-cb9e-4b73-b53a-a99fe55f163e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d46efd-89c5-42de-9260-a21f8a814f30", "sighting_of_ref": "indicator--9bdb94f4-4a4b-4d22-8168-7633520a7b1b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd3fe4e-5b1b-46b6-9bde-655da18fa5b6", "sighting_of_ref": "indicator--449d97e4-34fa-4596-a339-edd9c42b95b6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e11ab05-3b0b-431d-bdab-428d2fd115f6", "sighting_of_ref": "indicator--f2c20dab-ad13-476c-9a7b-795c506cc23f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d04c284-f4bc-4fff-bc4b-0d854d9dad14", "sighting_of_ref": "indicator--64cd6f23-566a-4ddc-a57a-f6e29a670137", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5dafaed-b530-446c-809b-5a99db71230e", "sighting_of_ref": "indicator--a64554d3-321f-4d5b-b093-cda8fc978b80", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382970e9-92d8-4aa2-bb07-9820d3afce51", "sighting_of_ref": "indicator--c291d9b3-6964-4ccc-af3b-4a0423e94cd6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e7de0e-18fb-4600-82cd-00e89c81c987", "sighting_of_ref": "indicator--39f26e4a-7433-42e8-9b0d-5c2251dd0290", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9d6d32-b721-41e7-810d-fcb5c31fd7de", "sighting_of_ref": "indicator--c0a50ac3-0ab8-4324-9d2a-6d7ebd2c9f3a", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cfe2af1-79ee-4681-901e-cc4713050146", "sighting_of_ref": "indicator--72472362-5a6c-43ed-be89-12642e40db82", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65358dcf-92ef-4c59-8855-42a19df9e898", "sighting_of_ref": "indicator--07d76b20-fe26-4ea8-8fc0-01a7987a58f2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed20988-ee9f-403f-bb5b-f9d7a6311387", "sighting_of_ref": "indicator--df4fcf1b-7ee1-427e-a9bd-c9f7259cf5e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b539487-07b6-4abf-8b82-e2de1a77a3d8", "sighting_of_ref": "indicator--c2defc7c-b4dd-43f5-b47e-90870410e70b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac8d7e1-ea81-4eef-b31e-eb7e36d3dfed", "sighting_of_ref": "indicator--9f8983c8-4507-4171-8e0a-57822363190b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633c7d56-3dc3-4896-a577-0362dc09cd24", "sighting_of_ref": "indicator--c4270606-0e09-496f-9cda-10adef970494", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02116fa-9d72-44c2-8253-79b62873419f", "sighting_of_ref": "indicator--4ed29dd6-4ec1-4afd-a684-721cf6490e0b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9212c7c-ec87-4831-aac4-e097fd663d1b", "sighting_of_ref": "indicator--0068373b-0244-4b92-a436-683e7f50b1b2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807f87b4-0bd4-4c7e-a2df-56b21e2e697e", "sighting_of_ref": "indicator--989ec4f6-df55-416f-af2e-1b8d47faf44f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00b19bc-69d4-4101-801a-103e5978b6ef", "sighting_of_ref": "indicator--cec698dc-100d-4cf3-8e2b-fd95d7956c61", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83936fe-f10c-4bc8-84b0-e171b6819163", "sighting_of_ref": "indicator--4be98105-ea0e-4bbd-b322-7aa8c83e67a7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e455e027-b5ff-4b60-a548-9e381ae33f02", "sighting_of_ref": "indicator--7d332de9-ba37-48f0-942c-daca29dd74b8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ec9fbc-5c11-48a9-9dfb-6e911683c197", "sighting_of_ref": "indicator--c0bc7e0f-e114-4051-8b44-9830117f83fb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4110429-383f-4f54-b9a9-3b827d11531f", "sighting_of_ref": "indicator--07cdb97f-4ae6-48e7-b89c-7fdc14e32364", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114510d8-1a42-4bae-99af-875e4c69aac1", "sighting_of_ref": "indicator--ea282c2f-931c-42d0-8fd1-29a9605e854b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0848428-62ba-4fea-bb9e-04afe06fe875", "sighting_of_ref": "indicator--497d9c24-6ac4-4714-ba39-82d23bb5707b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7490c948-527e-4e02-9202-1b6413dbaac1", "sighting_of_ref": "indicator--a4d9561f-566b-42a5-9397-4cb40619388d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6e0624-db5f-4e64-9c69-8470e6977ba6", "sighting_of_ref": "indicator--1001ba42-aef7-4681-99be-33a7f696ec5b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fb5754-f546-4a0b-ad66-4b01a2499e0d", "sighting_of_ref": "indicator--17819319-0125-4d17-8ca3-eb93c26d4ad8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7aef5b7-3da6-464d-ac48-4492eab86a6d", "sighting_of_ref": "indicator--4dc49670-3541-457d-9e91-565546c04223", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ca341b-b68f-40fb-954c-d1418f78a01f", "sighting_of_ref": "indicator--ca8b4190-2d8c-45bc-a849-58e0eb8e024e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7c84d2-b229-42ef-9474-d8a36730940d", "sighting_of_ref": "indicator--a9f9aa07-9340-49b9-b510-4c6b637f30e9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9d9ef2-31d7-4487-a460-9a7ade222d2b", "sighting_of_ref": "indicator--081af67c-f7a1-4c01-954b-0e305e3b0ef9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a5c3be-9942-4640-b0e6-98094326f39c", "sighting_of_ref": "indicator--fc854ddd-46bc-4ca6-9796-4b01efe7c833", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd6d998-a038-477d-acac-d11dc1c56d51", "sighting_of_ref": "indicator--58783c2d-96ac-44db-9d8f-242b35016a81", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53416552-2330-410d-a772-741ab00402c5", "sighting_of_ref": "indicator--669f325c-0445-4b1b-8e6d-34354d23215f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a521d9c-e758-4808-9a54-c3c73b5a58dd", "sighting_of_ref": "indicator--c8933c37-1239-4d7e-bf20-3ba68193c50f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24110d17-f09c-41be-a864-cf54d9833ccd", "sighting_of_ref": "indicator--19ae0182-bb60-47ed-9688-1b0d9fcc5636", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1c6a89-3df4-469a-b20f-c78c77de7d85", "sighting_of_ref": "indicator--a267b047-b18c-4bb8-91b5-2917e7997a35", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4930062-514e-47b4-bdc0-bfb5570096d7", "sighting_of_ref": "indicator--e00031bc-ee08-4837-8743-d5de59ba5ad3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70d586a-02c7-4725-a0c5-295bec88c4d5", "sighting_of_ref": "indicator--02d3c2c5-7a54-48c4-a6d9-d320ef05b140", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c6e7be-24ff-4d23-9e77-5609be0378d1", "sighting_of_ref": "indicator--3b88378b-5424-4fe1-b636-34b6ab3acf01", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea88c9b-245f-4656-a25e-7504d367ea5d", "sighting_of_ref": "indicator--fa92f0cd-889b-452f-bfdf-ebb52f7fa757", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec56627-d6f8-4868-8fa3-c2298be60caa", "sighting_of_ref": "indicator--11c8b110-e300-4619-aea0-c87b905b37d4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05f3940-8462-4317-b6f2-95fc476c3e0f", "sighting_of_ref": "indicator--8a32e165-a248-4e58-bd7d-74c418bb33a9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4f5535-76af-455b-9aab-7fa33b920a80", "sighting_of_ref": "indicator--2855e996-4c85-428e-b168-6e96564d6c83", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c8a277-726b-44e4-b515-3d076af86cf6", "sighting_of_ref": "indicator--9edf3b15-bfe0-4a19-8b44-8d1333c88e2f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699dcf35-cf23-4d66-84a3-e6f358bf5ea0", "sighting_of_ref": "indicator--9edf3b15-bfe0-4a19-8b44-8d1333c88e2f", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6faf87a6-1b23-4c87-82dd-d73fb2c9d2bb", "sighting_of_ref": "indicator--b38405ce-12bb-4ebe-b69f-7c92213a98f4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21060cc7-aefe-4168-a161-1213de6c5aac", "sighting_of_ref": "indicator--7dadcaa4-3393-4074-bed6-253516cb68ce", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883e93cf-0eff-44f3-bdf8-facabb8c00bf", "sighting_of_ref": "indicator--2fb06af4-77a9-47d5-96db-8cd7c6bd1adb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0b02d5-f7aa-4f26-8c0a-fdb6344e0f52", "sighting_of_ref": "indicator--99feb001-81e4-44e6-83ee-97e6641b1c6a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d7529f-1a15-47d2-a7f1-0b8c36ec5bc8", "sighting_of_ref": "indicator--4a72e9d6-26d7-434e-848d-cf9631ad7fd0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9adc53-7965-4eae-aa38-83d3e5b39618", "sighting_of_ref": "indicator--165bfd18-081d-40b9-981f-d131902cdf65", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c33e01-def2-4679-9a74-a32ab22494e4", "sighting_of_ref": "indicator--39f87762-b9fb-4194-8d64-60f15e4ba4c7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2cfe22-ee4b-4afb-9502-988e9229bb33", "sighting_of_ref": "indicator--868e191d-babf-4496-8db5-9346d87a2ae3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8f16e1-5380-4ee2-bfba-b87542a95aaf", "sighting_of_ref": "indicator--020b5d4b-1555-4000-a4f1-fd90102a2ea4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b93c0ba-adf6-4463-9ac9-06bfe13a6fba", "sighting_of_ref": "indicator--13524b39-8050-4186-9158-f7cd925d5ef5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71269513-1a1f-4fb9-85c9-503630c06445", "sighting_of_ref": "indicator--43e9e283-ac9e-4c20-8a11-7e56a08a8d5f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba940010-9bfd-40f3-99bc-0f6ceac375b2", "sighting_of_ref": "indicator--f7c2d48b-5840-499a-ad2c-9c54b8f1f282", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1a6c1b-1e67-4e08-8259-909ad8e10610", "sighting_of_ref": "indicator--1194feea-16e6-41d5-b3e0-559ac7aa241a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2d079d-da06-4616-9c67-d103469fdbe4", "sighting_of_ref": "indicator--3e281734-3c46-4787-a033-9f16b9333a1e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd076f0-789f-4248-b52b-df554042d4bc", "sighting_of_ref": "indicator--2308e479-7c65-4a61-9ef7-902b570b3721", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40326ee2-c252-4309-a4a6-6c5b56d23189", "sighting_of_ref": "indicator--f579b998-344c-420c-8e0f-edc797e5552f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c684d2-23ff-4bba-b5b1-6c1bd5d72fa1", "sighting_of_ref": "indicator--f524ed7d-b4fe-4764-83d6-50df8270e1aa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7102f591-7137-437b-8d33-080d4b95b964", "sighting_of_ref": "indicator--8dc13e08-c14d-4541-84a5-418a47047607", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ded73ad-3b0b-4698-92ad-c550d2423985", "sighting_of_ref": "indicator--b2511e2e-f1d5-4978-a378-9b11e782363e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5e8759-c012-4acc-aed9-339816a2398d", "sighting_of_ref": "indicator--8d7292d8-bff9-4ed0-89dd-9472424ea193", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16ccd13-7ebe-44ef-8d08-f05d31721efd", "sighting_of_ref": "indicator--8e59286f-cfe4-43ee-a9c4-5d7e9bab68c6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b19779-109f-4b9f-872e-a145fc4cd8ce", "sighting_of_ref": "indicator--eb4afcc6-17db-4857-bceb-08d203176d16", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c59bf4c-3e4d-4acf-b4dc-ceac6c56df3f", "sighting_of_ref": "indicator--72ed7fad-ae2e-4989-b903-999950915bf8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34dd418-8d9e-4738-89e0-016be6670124", "sighting_of_ref": "indicator--00ec4ea6-efe0-456b-8933-448588728997", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250b061d-e8d9-467a-88da-92cb85668fec", "sighting_of_ref": "indicator--921b48b2-cd59-423a-859e-bcf477ae6508", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb785b3-d753-436b-942f-3a9152835ff4", "sighting_of_ref": "indicator--eaa2b3a9-2b9f-4e5e-8963-12a15ba052b8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f5a6f9-af57-45d0-b3d3-ca8a32ee3381", "sighting_of_ref": "indicator--2f490a31-58c5-4e86-973f-8ac5e3632bd6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189a5391-4999-44e1-aebb-e4511facff9b", "sighting_of_ref": "indicator--3f27b3c8-517e-400c-a503-58b64ba9b341", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace71087-acf3-4d61-a21c-303daf732548", "sighting_of_ref": "indicator--6c76b422-2fdd-46f6-8ea4-9c2149193822", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d54c986-2ee4-49e1-a2b5-6dccaf93f1b2", "sighting_of_ref": "indicator--29328347-b5b5-4071-96c6-4e435718872b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0c706d-dbc1-48bc-8136-e8a862c45b77", "sighting_of_ref": "indicator--b9a2cb60-0a02-4b68-93cb-35de2c7fa3c2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c86f37-ab86-430c-9b18-06310737ea5e", "sighting_of_ref": "indicator--e0151c75-24d1-42b6-8d60-d161d0bed631", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1a155e-66d4-48fe-8d3d-f6afa6553938", "sighting_of_ref": "indicator--9c910e90-b941-4ebc-b7ef-95855585726d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661b90a4-2f46-4eb6-927e-f776ac6bf2a5", "sighting_of_ref": "indicator--5d5355b4-112e-4796-af28-a3b66bfcb848", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d76c7a0-f975-498e-8375-9a3b31932417", "sighting_of_ref": "indicator--2edbf24b-c7d5-4dbd-953a-6cc58a4d0acc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f62c4b-46bd-464e-b43a-054a99d36f06", "sighting_of_ref": "indicator--1cc83a8f-7cc6-4533-bb3d-3ef38c0573db", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5aa9e24-710e-454d-9d0a-cf62695e6c36", "sighting_of_ref": "indicator--aa8b3cdc-73f4-4a58-8900-da723e610edf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3603e9-6f86-4359-bcad-a59823f84229", "sighting_of_ref": "indicator--2d377548-34c5-4e11-829f-e99e5d367c45", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7630e2-2515-487b-bc88-3dc5b62fc447", "sighting_of_ref": "indicator--fc71fc9e-ed8a-4588-a19a-54bcff366998", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e2cf7e-b7a2-4a12-abf5-04a69b5623d9", "sighting_of_ref": "indicator--39a6c6ec-2d20-4263-bf78-193479b5620c", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d17e0f-ae8f-4f7f-8582-b5074fbe5dde", "sighting_of_ref": "indicator--160c32cc-d472-499d-82e2-abd4d1928365", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0badb80-ce95-485f-9856-5c3ebf85964e", "sighting_of_ref": "indicator--ed566561-9d68-49f9-8c19-0b5dc272b13d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1317d48-2210-42b0-abef-343c4fdb1659", "sighting_of_ref": "indicator--ff01653e-1a5e-420b-b365-0fc5fe1fe61c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ae5ddb-7feb-4967-ade9-c23c1808580e", "sighting_of_ref": "indicator--c3c785a3-85bf-4487-b082-01478da8aae4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba395dc-0063-4a71-ab88-c13b23641fba", "sighting_of_ref": "indicator--bda20e90-b004-4f8a-95fb-21d709336463", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf41cd6-92d2-4c95-9b1f-7aa467cfc2c5", "sighting_of_ref": "indicator--82c1e915-71ff-461b-80c2-344ea7245882", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5890cd1-1c13-449f-b51b-09571637c5eb", "sighting_of_ref": "indicator--8a4325bc-ecf9-4c7a-bacc-b1f03cb38f12", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e555f881-3a83-461c-b251-41be4034f931", "sighting_of_ref": "indicator--5ca73495-52a5-4624-8031-3a23ba1bf3d7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee70d065-46d7-499c-8fc4-848bf9272dab", "sighting_of_ref": "indicator--4f5c7d4e-309a-4bfb-8605-155e82bc40e7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e327cc69-2aca-42b8-9ebb-eda3b7010c65", "sighting_of_ref": "indicator--59c3c31e-be26-4e54-82e8-eef78f408bc7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17f01fe-d349-48ea-b9af-bbffde12ec7a", "sighting_of_ref": "indicator--928285e4-50b0-446f-9ff1-bdb576150c5c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb917025-0d09-4c60-b6c3-63ebfea72009", "sighting_of_ref": "indicator--581f8789-c6c9-40e4-b15c-29de113c829c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734ef4a7-9108-484a-830a-0ec019517803", "sighting_of_ref": "indicator--fd7d6776-64eb-460b-932b-2a6b27af3206", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07223e23-b52a-4263-8931-c21867b5622b", "sighting_of_ref": "indicator--55f14ce4-1cc1-46f1-803f-1f90953a2b14", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c456ca-bdf3-4343-a909-d8cddb360355", "sighting_of_ref": "indicator--614ba8d2-cab0-416e-b036-a34375eb170f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9d264e-50b5-4519-9e0d-0adaa2ade0e5", "sighting_of_ref": "indicator--1d443cd7-971a-457a-a19d-16c4ea5a9f0a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a1c8b9-d1f1-42e9-84a5-a9b34502202b", "sighting_of_ref": "indicator--42f424e4-399c-4dcf-9428-32e9bb29ac47", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99979b0d-7a6c-489d-acb5-821df16f75bb", "sighting_of_ref": "indicator--3b2a7a37-56de-4399-8f58-4234eeaf51d0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72aaadf6-c91a-40ab-b529-15aba1b09747", "sighting_of_ref": "indicator--2d72b99f-e4c6-4c55-8a74-babcea03e537", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18e7665-303c-4f73-b26f-0d51e8377251", "sighting_of_ref": "indicator--244a143b-1cd2-4483-b1ab-e571aa025bce", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80380d7b-aebc-49f1-9291-d2de097a223c", "sighting_of_ref": "indicator--6cf968ee-909c-43ba-a524-b6fd8bb6673f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e23b41-a239-45a6-9a12-bc906086e472", "sighting_of_ref": "indicator--11fac661-0535-4319-9d89-8944e23ed4be", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9cd384-4699-462a-9e4f-a2729904a5b4", "sighting_of_ref": "indicator--d4a435b9-44d4-40ae-81eb-316bdf502714", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42afb5b3-e61e-4468-bb38-1380b100af83", "sighting_of_ref": "indicator--cc06871a-ff2d-44bf-ad8d-57c12a4a6172", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8b207c-79c0-4372-9978-98c209d0c81a", "sighting_of_ref": "indicator--eb261619-cda3-4352-94c9-c3d3f34f41de", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c43ba14-8f45-4d54-9bee-dfd0dac9402d", "sighting_of_ref": "indicator--3451306f-e189-4187-8789-c444217c8052", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1401bb2-e1d2-481f-94f6-02c71d21f996", "sighting_of_ref": "indicator--dced8212-5afa-4e3d-ab73-045dc0b07de0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9201f6-c237-4523-97b6-a25f56daa885", "sighting_of_ref": "indicator--ee4ccb8c-3c30-4057-8d0f-3e8eee5fc62d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592fd19c-2501-492a-9cd4-03a62dde6ca0", "sighting_of_ref": "indicator--1c19a32b-ccf1-48f3-932e-49a78c4bd1b1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5114c7-6148-4c18-8acb-4417bf578f79", "sighting_of_ref": "indicator--a06a0b1f-2b09-4f56-ad0b-5989e3064ef8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d11ebe9-5d8a-4614-9db8-808d73d3519e", "sighting_of_ref": "indicator--f169f625-f3fc-4df3-be40-89d2c5876567", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42de865-6055-42d7-9630-661ec35fa428", "sighting_of_ref": "indicator--8456dfd2-b416-408d-b9c5-dc2739e56290", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0597f848-f36f-47f5-b7c6-138b2eafeac5", "sighting_of_ref": "indicator--43876101-0b8a-41ed-8e51-ab8dfb805e3a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be48492b-5a24-4a92-98b8-6c8a0e8fc124", "sighting_of_ref": "indicator--a4fcad96-4b61-4536-bc2c-87cf957cf2bd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a15cc4-c89a-415e-845c-3bdff0582b2d", "sighting_of_ref": "indicator--726b12ff-cb0f-425f-a076-a55736425451", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d13461-e788-47d0-ade3-c5d4b2e2dd0f", "sighting_of_ref": "indicator--5932ee6e-5c44-4b49-a649-0c863d729c86", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c4f230-fd1f-4c64-8499-6553e6c6ba72", "sighting_of_ref": "indicator--61ceb21f-3bbd-40fc-abb5-8afc06f5ef5d", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0710d63b-1c3d-4517-ab40-306a6596565d", "sighting_of_ref": "indicator--2f3fd29f-5d58-4536-bd18-bfdb7f750417", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd4f594-e2ba-46a5-b80d-70f87355c868", "sighting_of_ref": "indicator--da464948-663b-4b65-a1b0-bc41b50626ef", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438d1161-1b75-4879-9ead-8511c7c18ded", "sighting_of_ref": "indicator--be8f3f75-d977-4499-b6b2-3094a01cefa8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96fafbe-d031-48b9-8f6d-c41944852f24", "sighting_of_ref": "indicator--adea9f69-cf70-4416-9fea-ebaab546626c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2728f987-4e3d-4398-8597-53df46fa792f", "sighting_of_ref": "indicator--c242a3a8-8668-4ea1-aa02-b18441753636", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88400e5a-ab08-4a22-a989-949b7dec006c", "sighting_of_ref": "indicator--36d5d442-7f72-49ce-9ab9-c36885a31d33", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f3e855-2d88-4df4-9ba9-4b50bb24dc82", "sighting_of_ref": "indicator--305e9847-a523-427b-aa60-cf891f36e1a8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f147145-c8b3-490f-8593-27c6ab4e430a", "sighting_of_ref": "indicator--c451c253-711d-42d8-9797-a93d759b79a7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e07376a-b2e7-4537-9f18-0b356108c6d3", "sighting_of_ref": "indicator--a967a80b-ac4a-4050-80b0-a50276928159", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248e3161-f5a6-4c9d-8f14-0660733fac6f", "sighting_of_ref": "indicator--4c99c39b-3a9b-4c34-8da4-656f4f39c8aa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1634ca77-6676-45b5-bea2-5f8296e6e79d", "sighting_of_ref": "indicator--f51e5b5d-87e6-4ec2-b388-54f32f54082c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47753bbc-f8de-4e9d-a2c2-cb3f0240cca9", "sighting_of_ref": "indicator--bf2e54f9-c462-4074-8a17-793766572dfa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c923f297-bce3-4a45-992e-1501299c3c70", "sighting_of_ref": "indicator--cbfb37bb-cdf5-462e-b8b7-487f1c610c8e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66684d8a-6c40-4150-9a18-e582b5dec18a", "sighting_of_ref": "indicator--ddcaffa5-d2f8-4fa0-b817-69d33329c13d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd04571-e17f-4181-bc25-5be2359c2b16", "sighting_of_ref": "indicator--3be3e581-8c8b-4e95-b902-88b34e9c820d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0933ada-2ed2-4885-a243-e5623ff801f6", "sighting_of_ref": "indicator--0c2a199a-6490-41cc-87a3-034ad089fd9c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e01d1e-8693-425e-94d4-50ad59946a84", "sighting_of_ref": "indicator--108b7673-4640-4dc6-b9f3-389dba4e2958", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc3b83a-e2cd-4707-a3a1-3b89d305f3bd", "sighting_of_ref": "indicator--4a9db1c4-f67c-4035-aee9-490b1277bbae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57e4af0-6cae-4471-8a05-4906b576bf11", "sighting_of_ref": "indicator--bda7b792-642b-4c18-821c-c3074b1f4045", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da267045-7a91-41b9-87b4-b64b5f9c5235", "sighting_of_ref": "indicator--026340e3-bb98-4076-9945-414339805b05", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bd7f31-44bc-42b0-8d7d-9262660f4b83", "sighting_of_ref": "indicator--786ad319-c935-4932-b8a9-8c54707a75c2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746f08b1-e0f0-405f-aa3d-1712746fd961", "sighting_of_ref": "indicator--aeb714ef-ba4c-4a84-a50a-b4c0e3802d1c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dafd57c-5bf3-46ff-a3b4-e84c0080d91b", "sighting_of_ref": "indicator--d323ec1c-d32b-4c52-9423-05baf0b8920f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5c4490-653c-49ac-8136-8aa8e3fd5491", "sighting_of_ref": "indicator--50fb0748-b2bb-457e-b2f5-5cc2b6496d9f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6907dd4c-16f6-4625-9821-adb8b51eca1a", "sighting_of_ref": "indicator--8a2ee1cf-bfd4-4900-9096-6d7808f5133e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642de57c-e7ad-47e2-81dc-576a06cc07ce", "sighting_of_ref": "indicator--18465d02-e968-49e2-ae3c-de3631fc65ef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76348a77-5d79-48f7-83ab-319d303a602a", "sighting_of_ref": "indicator--c03bb1bb-dfe5-4c59-9a42-71d3ac9ca38d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26350d5e-bd67-4803-83d0-0a6dabe0604e", "sighting_of_ref": "indicator--b814104e-d17e-4fc4-b937-0a4d3ae3db73", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592fd146-bb55-46e8-ba05-cee0ceb6bf0a", "sighting_of_ref": "indicator--fe51b563-592e-4372-9c09-3075857d6bab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190b8300-c815-4e9b-a1f5-e81dbca46f52", "sighting_of_ref": "indicator--96ebc429-9e1f-43b5-bd85-b66cd555d1f4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b4117d-489f-4bc3-829a-25408951713f", "sighting_of_ref": "indicator--cfe51153-b180-421c-9b9b-123507299ceb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50442db9-b310-46b2-8f7b-006a88f6f80f", "sighting_of_ref": "indicator--79ab6e83-9e5a-4250-8704-45c53da1447b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2229e916-72e7-4034-aeee-c3b362162b56", "sighting_of_ref": "indicator--447b3626-c841-4130-ae1e-75070b7c2e2f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca81c0b8-f992-4d28-a110-216bf2b2a4ac", "sighting_of_ref": "indicator--49b2e0f3-2860-433d-a56e-9c1d7a8610e7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0f8733-ec00-439e-a825-2a02ff2fbe52", "sighting_of_ref": "indicator--4bef051c-079b-4358-8646-b5d844675eec", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d424b2ba-fa72-44e7-9a3d-4778aad5d3c4", "sighting_of_ref": "indicator--763a5ee6-f380-480d-a708-439643bb3599", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a5bba2-55b8-4e11-86dc-394e0136e87d", "sighting_of_ref": "indicator--8cf49208-8c0a-4639-a6df-1c0c5696f49b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7d054e-32fa-4d4e-95fd-8c73efd591c7", "sighting_of_ref": "indicator--72b9864d-618d-48ae-a84e-696a33d23530", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f75c5d-09af-411e-8112-1c796b1d1b69", "sighting_of_ref": "indicator--207e455a-b2c6-4fdd-a199-ab092053a9de", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82576d0f-1250-4d92-9ad4-594f416f6274", "sighting_of_ref": "indicator--47dbd939-97f0-40ed-a3da-bc5ffdf49cc5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb92e48-0d65-46c6-a727-af3f6420ff16", "sighting_of_ref": "indicator--fecdb636-a837-4584-ad7e-3f4753b6ca4b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ed43c9-8c62-4257-8ee7-2d4e523fcef2", "sighting_of_ref": "indicator--9d90758d-b59c-4066-9c3b-1fa53344b83a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922a95a5-1f04-4cfa-9a40-26f4a0785b37", "sighting_of_ref": "indicator--8bec45c5-8dff-4b89-acf9-8aee27f31ac5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6958d4-3fba-4a39-a4a7-7c20a47268fd", "sighting_of_ref": "indicator--e3875ffb-8167-41af-b8d1-2bc658d3b0a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971e4b0d-9c70-4058-a267-cc493e27d49b", "sighting_of_ref": "indicator--90f5ba6c-5d6a-4bab-b538-074b46777013", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428f38a0-8d25-4296-b69c-0967a649288f", "sighting_of_ref": "indicator--916994ba-879e-4435-a62c-9f0b34eedaeb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0193c68-0ea1-42f8-942b-b8eb6c1b2730", "sighting_of_ref": "indicator--10e3ee95-3a91-433c-a4b3-b5b2d74822b8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6aeca37-3e09-444c-8e3d-f739f4e6543d", "sighting_of_ref": "indicator--8a55e511-0a9c-4cb3-8728-79adb6f9a4e8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd546f0-b11a-4a96-af49-9ce78e762bd0", "sighting_of_ref": "indicator--59e9bd05-9d37-411b-9d82-6f89f9fb4218", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4800eb1d-17a3-41cc-bc7b-671b4bcf2067", "sighting_of_ref": "indicator--a3c3d848-9b3c-4c36-bf89-fcf402e46a16", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb40e62-09a2-4813-9313-57f44e6ce6ec", "sighting_of_ref": "indicator--c5d80b79-fb1c-4332-96ae-f50956922754", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b2c203-8037-4dd9-89dc-db3a752bc3b2", "sighting_of_ref": "indicator--49eb76ff-2330-4bf6-b669-3015c37ab459", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24f048a-09aa-449a-9c43-6bfcf034445f", "sighting_of_ref": "indicator--8bdec676-5566-4aea-8ca4-7a6d24eb0439", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a321a010-f05d-4411-a877-6961bcf89179", "sighting_of_ref": "indicator--78346f3b-4655-4f8f-8eb9-1ba9c957ce86", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3e3c3f-4c1a-47b4-b1f1-4c3094b47190", "sighting_of_ref": "indicator--f98777f1-4ae4-4224-b350-8941cdb812a5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6400c231-a3c0-478c-92c5-3e2a507f9d63", "sighting_of_ref": "indicator--8fc52f09-21b7-41af-bb56-2925a13388bf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4126b46e-1907-49dd-8009-5804e5b40f28", "sighting_of_ref": "indicator--d4d4bd4d-1d4f-4d0d-9d36-dbc9d2be1c83", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee764672-c8b6-4641-b923-b2b5fe251f0e", "sighting_of_ref": "indicator--40644806-7856-481a-a511-0c2a48cc2dcb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b4d4aa-fbaa-48c8-bbd2-8dd275dff6da", "sighting_of_ref": "indicator--01dfcab1-7633-4bc1-84ad-8d897da8a9f8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e980db27-d637-4e3e-a2a0-cc30fecf7c4d", "sighting_of_ref": "indicator--e3b3a514-110b-49b2-bdb1-20d4b89431b4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d509496-22ae-46ff-a2a3-2a2038a59ad8", "sighting_of_ref": "indicator--83d39745-9e73-447b-9841-5d9feaf7b39a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c1ff2b-2c6b-472a-87da-6c6b1f3aeebe", "sighting_of_ref": "indicator--375dd19b-be0a-4979-b276-a00a6d88ecca", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f18ea26-0a5e-44a7-b2e5-ed4fc4042245", "sighting_of_ref": "indicator--dd476cb2-0925-4ac8-bb58-17473062ad03", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707c413b-5a4a-499d-9999-272578618259", "sighting_of_ref": "indicator--16f9a7a9-c159-45fe-936d-cf86a1dabb9a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae47243-b4b5-46ba-8973-6ae4196a6f4b", "sighting_of_ref": "indicator--302a58cb-294a-48b7-8658-3dce1d9e9939", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f96f34-3e4e-4f20-a99b-b5deb01748a9", "sighting_of_ref": "indicator--3a68c1cd-2f55-4383-bb31-50a6ab9ae0f2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f082f9da-5510-406d-985d-56ceccd36878", "sighting_of_ref": "indicator--7a9cf876-5236-4f54-a44d-4967118483c0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73751d77-02ad-47f5-b192-6615a713be8e", "sighting_of_ref": "indicator--d347a3d0-ef5d-4815-b658-63b38dcc5b58", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e022cfc-2439-4c4b-b864-96451d977941", "sighting_of_ref": "indicator--04507e66-5ca8-42c3-91cd-68975be9eb21", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee9298d-563f-482e-8cee-7f309d4f1526", "sighting_of_ref": "indicator--28bd71ec-e147-4577-b6b0-1f76ee66da89", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49900845-0519-4fe7-b095-9499409910a1", "sighting_of_ref": "indicator--e03353cb-352c-440c-add0-3ee16c9e12f0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd23fdb-0f2b-4a62-bb05-60d8f327dd76", "sighting_of_ref": "indicator--d6497643-b401-44ec-93e7-8ebdbc42bb2a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce13fa95-007a-4617-b443-3905ebe7f484", "sighting_of_ref": "indicator--c31e1008-f76a-4ac2-8fb2-4374f1d78bc9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd71dd67-3c7e-4fb9-a238-dae381ff0267", "sighting_of_ref": "indicator--be640637-7351-4196-96ab-113e96aee0a5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7a9135-99a6-425c-9e4b-0acaf6ec5cc9", "sighting_of_ref": "indicator--6dd49b4e-dbfb-4f33-aed1-0cabbad7c38e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da60642-56e6-47e0-ad79-4100b2096520", "sighting_of_ref": "indicator--a1b977d4-9004-40c0-85e1-7f732dd801f3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf1c216-b508-4c1e-94df-4ac6b7e463af", "sighting_of_ref": "indicator--45355c2d-568e-48e0-94cf-49ff7279245f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b899f243-0a2f-4d57-85a0-d801a19e74fd", "sighting_of_ref": "indicator--ed631a23-003c-429e-b46f-7e85c2355449", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f9ea16-2387-4b51-89b3-900a502d2d0a", "sighting_of_ref": "indicator--a84db925-3d3c-4056-a141-4d0af0d87be5", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419112b1-0574-45d7-aae4-6b4d2d781741", "sighting_of_ref": "indicator--f89ca404-367d-4d90-a301-97fe8e3b53e9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62449d9-fbd9-4f30-bc53-a6b76d9d4e46", "sighting_of_ref": "indicator--21d29b38-1488-473e-807b-efb77e65281f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669144c1-62aa-42e9-9758-ddd7665ce89e", "sighting_of_ref": "indicator--2e38730b-8db3-41d0-b114-83a09c0418fb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66db408b-61a9-4f6b-991d-29a023e863db", "sighting_of_ref": "indicator--f0e74a78-b59d-46dc-b5cc-d2830677283d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7af6aa-a982-4221-84b6-dc1679559518", "sighting_of_ref": "indicator--65938c0c-a20d-4044-ab3f-6740714aa365", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd71514-5fe0-4f8a-9b93-33c8757cd355", "sighting_of_ref": "indicator--e8595d0a-14e1-4ba3-bd5c-d4a427dd67ef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2fbcaa-fe4e-4be9-93cd-96884ae99867", "sighting_of_ref": "indicator--e8595d0a-14e1-4ba3-bd5c-d4a427dd67ef", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee52ed5-66e6-4e18-8013-441cee83ae8e", "sighting_of_ref": "indicator--e8595d0a-14e1-4ba3-bd5c-d4a427dd67ef", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40984af-2916-4315-a1e4-8c08ddd44e7e", "sighting_of_ref": "indicator--928c3745-24b7-4ac0-81f4-faa0873b9057", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5a6225-017f-4cd4-91ac-07c60c170d46", "sighting_of_ref": "indicator--5f6a2477-490f-4587-b2b9-2746031b75e3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c749abe-e103-4de1-8ea2-0bd87576453e", "sighting_of_ref": "indicator--b27bce81-e55f-4506-b599-f4a3758fd22d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2c54de-2e71-456f-8b36-bc1e86d4a156", "sighting_of_ref": "indicator--ab6f694e-ed15-4cbc-8dbb-0a3e955c4e4f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e098a7-021b-4884-827c-bb905753ff22", "sighting_of_ref": "indicator--04fedb81-7202-4dd9-a622-63c968f7cd21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7453fdb7-9bc1-4ece-a396-4bd7ea45ab21", "sighting_of_ref": "indicator--3367cfaf-9839-4515-bf34-f2e7b33316b3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92186d9-f56d-45dc-af6d-ec8a7cdbdde4", "sighting_of_ref": "indicator--b2498d83-fb36-4c90-bea4-fe353a21c768", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c31172a-4993-4407-9a6f-743b8ed13207", "sighting_of_ref": "indicator--1eed15d4-b88d-4317-a3fe-80f596cf39e7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a914c1d-4bb5-43f8-a8bf-06bbb8014e31", "sighting_of_ref": "indicator--7b0afe27-1191-47b3-8614-ca3c1f15a777", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da227f9-38d6-4715-b4da-4ad04fbe5ca3", "sighting_of_ref": "indicator--60435304-bb0a-46b2-813d-6bdc892e218c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4fbe7b8-06a9-4b1a-a3ad-fc79272c0865", "sighting_of_ref": "indicator--166a6e14-5f99-4489-8ec9-84fff85ce63e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91d9472-434e-4a79-97bf-f48aa9b72f4b", "sighting_of_ref": "indicator--e9365ef9-cc78-4e1e-af34-d52f7786c074", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb6f756-747d-44fb-b19b-1344954a0311", "sighting_of_ref": "indicator--e9539192-9b86-44a0-846b-c847b9a3e1e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80546140-d5a0-466f-bb84-b45633810bac", "sighting_of_ref": "indicator--8aa0f859-880e-4b8f-944c-ad4abd008dcf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7028e37-13ac-4a77-8a86-949789d40d5b", "sighting_of_ref": "indicator--ccc70bae-4ec7-480c-8d01-1f06af3f695b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54db1b2-2d67-41b8-b720-4902f4be7d19", "sighting_of_ref": "indicator--1bbe2f58-8d9b-449e-b7c1-75b866edbd67", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c2214b-8aed-40d4-bfde-65a713f744e7", "sighting_of_ref": "indicator--b00d9dfd-d528-4984-9a94-ae1557fc8eb9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c12944e-9233-440c-a8c3-6969ce59f5e6", "sighting_of_ref": "indicator--e948e48a-2ac4-443f-8c08-4d663abd1cbc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a858f6c-3c98-4b00-b665-69504473e19e", "sighting_of_ref": "indicator--defeff3b-9b9f-4402-b073-ccdc502388b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b573f77-5d37-4bc4-afca-dbfc386410e3", "sighting_of_ref": "indicator--d31f68ee-3cc2-44b8-9b92-2b5afbe7cf45", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60ca239-a20d-440f-8d3d-81b63e030933", "sighting_of_ref": "indicator--9744fb77-cdab-4efa-ab4c-cdf4394f9e85", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa04edc8-cd5e-48dc-88e3-eea229afa5ee", "sighting_of_ref": "indicator--2e207ce3-4a33-406d-bf0a-fd26b3abd3b6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4419e5bb-4840-4892-bb9e-e27df7ec363a", "sighting_of_ref": "indicator--216a4f67-6e2b-463c-8404-2f4e0d0282d0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d8aa3e-be1c-4dda-a03f-addb391a4515", "sighting_of_ref": "indicator--667ada3c-fba9-4356-9822-1df54f1bf697", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9e16f8-b7a1-41c4-b91e-aa6174efaf72", "sighting_of_ref": "indicator--dc7bd59e-2473-476c-8924-682250070a4a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa81b08-29e3-4c8c-8efb-167fc1487a00", "sighting_of_ref": "indicator--1ce76d70-78e5-4eef-a52b-4e2a1515d655", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1dcace-52ee-4b5b-9a9b-900e00cf64a5", "sighting_of_ref": "indicator--5e1da196-ac3b-49b6-9dd3-74f603a6ae57", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831c2f58-cafd-4f6d-987b-d1d5ec5f5e35", "sighting_of_ref": "indicator--2a4bd77a-2fb0-4293-a900-0e4a7f0f6d7c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819cf658-1e8e-41a5-9994-0a3bdcb466e2", "sighting_of_ref": "indicator--7908f852-4eee-48bb-abcc-cf2006e9fc18", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01e58df-bca1-4a6e-bd86-1c2c410517b1", "sighting_of_ref": "indicator--3431757e-3e3b-427d-9966-3e42e736b7ce", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486106fa-bc5d-41e8-ad68-1d68d1f26118", "sighting_of_ref": "indicator--cfbcfc74-0497-48c5-9028-297df2d2ca60", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b5e739-aee1-4edb-b009-58b8e0540aad", "sighting_of_ref": "indicator--a03cd172-94cd-467e-833c-7428adf34702", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e808b0e3-ed4e-45c7-b68b-2214fe2d07b0", "sighting_of_ref": "indicator--4b10bda1-d416-40ab-beaf-1b8c82744740", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50f75d5-998e-4a22-8987-47f25feb0b29", "sighting_of_ref": "indicator--441f2bc1-6534-4724-b164-7cdc42064584", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d17d241-f68e-4224-9843-0448b95bd6a8", "sighting_of_ref": "indicator--9494efe5-202f-43aa-9eaf-7b09819296d3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d5cf03-8e48-466a-bf83-2c7c808c9d90", "sighting_of_ref": "indicator--43b0f2a0-bdb7-45a8-bbe5-14c73c3b6030", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdc743d-0990-4792-93ff-7eb19685feb9", "sighting_of_ref": "indicator--3a619e94-684e-462f-88ec-cd3110a9a225", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada84c30-099d-49fc-9c6b-0b0954256169", "sighting_of_ref": "indicator--ae95e656-2a6d-4c91-a7b7-730c5351b205", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ba195a-7131-4fb7-a521-a49cf6f1fe17", "sighting_of_ref": "indicator--b7ae258a-1316-4a46-924b-14b55ceb1420", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bf5c1b-92b0-45d4-b6c6-0029e3060338", "sighting_of_ref": "indicator--1c368207-6d25-444a-ba69-721d30a0a992", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9521f6-e0cf-4d74-a9fb-e90e20b8a811", "sighting_of_ref": "indicator--5160d547-5981-4960-b881-54dcd236c56c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7ec228-3cef-4ee0-9c12-f9911737819f", "sighting_of_ref": "indicator--1cb0082a-edea-4620-9df0-c6bd676eb7c8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6de061-0f38-46a7-9c8e-880c7c6dfee2", "sighting_of_ref": "indicator--3010f0d4-b019-4c39-94a4-2e418f44cd02", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27a551c-9dde-4908-857c-300df555ead2", "sighting_of_ref": "indicator--4ca1afe7-7993-4d6d-bc7d-6b3ea428d1ad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2622ef-69cc-46ac-8c50-57f42c6a1e47", "sighting_of_ref": "indicator--a54fd085-e369-4ae3-a521-90bdace7cd7a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8057a6e-ec48-4568-8be7-2f92ce5c2127", "sighting_of_ref": "indicator--31abf6eb-35c2-42e7-94a2-6eec8c83e4de", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09dd8363-8cc8-430d-9b99-641e810c25d4", "sighting_of_ref": "indicator--33ddc903-57ff-4255-ba09-ccacb2009898", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db74788a-29fc-4c80-9ff7-e1fe5c0c66ac", "sighting_of_ref": "indicator--14d1007a-a094-485c-b832-fe75b17cc497", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5727cf0-c519-4a91-9fd9-af4a8bbd2464", "sighting_of_ref": "indicator--e5948191-eeb3-49aa-8213-cd58c677958a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3a4d19-164a-47e6-a2ef-e4fb01693af3", "sighting_of_ref": "indicator--a446cced-af61-41eb-bb25-74a72bef8103", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60429f1f-9fe9-4ce3-9756-6f641bb23820", "sighting_of_ref": "indicator--5e572087-23aa-4ec5-a69b-1fc2926c6d0f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19230a22-0bb1-478c-a6d1-2e4d627693c0", "sighting_of_ref": "indicator--242a4361-03fb-40b0-b57d-29a8ace4ddd9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4230bc36-ad8b-4354-ab06-6882c4a56ffc", "sighting_of_ref": "indicator--aded10af-593b-43ca-a37f-a5eec572ed51", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf15b5ce-3631-4aed-b4af-99355e590317", "sighting_of_ref": "indicator--c592ccb8-27ec-4571-a8a5-af2eb765a08a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f1125f-a4a1-403d-bc67-38718864e1e3", "sighting_of_ref": "indicator--a666ec8d-7a44-4dc9-bf1f-e787fda3b3bd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8922315-c9af-46aa-a2a7-361ee7d54455", "sighting_of_ref": "indicator--d910eca7-1d14-4a7f-a84d-e2e64fddd466", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2a465e-b1f4-40b8-8b21-37012464095e", "sighting_of_ref": "indicator--52efd699-b795-49e9-9f19-96dead681629", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f18467-bb15-4049-8751-97864b7bbd96", "sighting_of_ref": "indicator--3a38625a-9ff2-429e-9d9a-7caedb75bbd3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b21fa13-f345-4882-8e97-e5197c994dbc", "sighting_of_ref": "indicator--6083a7ff-9567-4b37-8eb6-9fdb6f2bea37", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3deeda1c-79fa-4606-82c4-e2d472bd1054", "sighting_of_ref": "indicator--ad1c4920-d120-43b3-920c-2af29d3cd6bd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e299bf3-bcc0-4182-9e48-ec989c96cd84", "sighting_of_ref": "indicator--8f0e1edf-9247-4e08-93b0-150e6ab6935d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60275e0f-c059-4511-a7cd-c26b10f0c267", "sighting_of_ref": "indicator--17b32468-a21c-4f92-9760-1e048149951f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4cf7b5-a067-4063-a6ac-a37ad2bea47b", "sighting_of_ref": "indicator--6f03d9a9-1dbf-41da-bb3e-f5ba786372d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b9d325-f7ba-412a-9b3a-d91994d19a13", "sighting_of_ref": "indicator--2f74c5d0-c339-45a9-adc3-bf6599c68052", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5720f624-22f5-4486-a2c7-a35c4eadb290", "sighting_of_ref": "indicator--faf6d75a-2ab3-4484-9e5f-5e738f64bb2c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edeed291-486b-4112-ab9c-448eabb7b62f", "sighting_of_ref": "indicator--48743a0c-b453-46ad-83dc-cf53168624b0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbfd78a-0853-4f76-ae78-30d9b87b4bb3", "sighting_of_ref": "indicator--3d8189a1-f2a4-46d1-be95-d117571bc834", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19a3464-f90d-4e7c-94e8-508e2d6566e2", "sighting_of_ref": "indicator--dc600c86-342a-4786-9fe1-25e9280893e7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c3dcc4-255d-4aa5-9c7d-5b0544b688f3", "sighting_of_ref": "indicator--7f9d8c78-857e-4592-8afc-e24bedeee65e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289fa262-9c91-4aca-935f-79b3d239cb28", "sighting_of_ref": "indicator--2ff87134-2471-4288-a675-6add74d43f43", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b22c73-b584-4b36-adab-517b3ba8c851", "sighting_of_ref": "indicator--ed6a0ba4-a461-478f-8f0f-4a17cc783854", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bd11be-ca4a-4d0c-9a3f-9133bbd7762d", "sighting_of_ref": "indicator--abbd84f5-b274-41d5-acbe-f3870b0cb908", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15697cb-699d-41dc-b28b-aaccfff3f624", "sighting_of_ref": "indicator--6d202bd9-9fec-4a8c-9883-b4e378d30630", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11acee4-bf77-4815-a249-ddd80cc96713", "sighting_of_ref": "indicator--a3a1bbb0-9408-45b0-8635-3e9e5410ce4a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fe30ba-20af-4ba6-8674-7746e71ccc51", "sighting_of_ref": "indicator--99dfc2ba-ed6e-4a71-a331-96886c0a2c6d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8a95ac-c587-4143-867e-29583b7532b1", "sighting_of_ref": "indicator--e352bb57-d4d1-49ac-9c25-349bcbaa8fde", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875df724-2bb1-4bfd-a85c-75becfbe403d", "sighting_of_ref": "indicator--434c9513-de57-4a44-80d6-63f19a49f7f6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ccf6af-d9c2-4f12-9118-b69e1d07d094", "sighting_of_ref": "indicator--ab7bb818-3467-47ff-93a8-b8b95c1e9fcb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152ffc96-92ea-4ae6-bf78-c4238f2be704", "sighting_of_ref": "indicator--16cd8454-f974-4f38-94de-b68962cf16bc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1b9c9e-3496-4f95-827c-b996669d9366", "sighting_of_ref": "indicator--9ea580e0-2f41-4af9-9b9c-66f4cdcb4061", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042ebddb-3d42-4604-9dc8-cd989585eb70", "sighting_of_ref": "indicator--3b5aa353-aa46-475e-8a80-92c14b4a34d3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c05d4b9-40d3-4ef1-ba46-0681a5e55b36", "sighting_of_ref": "indicator--341af1df-c04c-4fa7-854f-11033f97a36d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0338763c-a86b-4094-b0cd-67f7925fa849", "sighting_of_ref": "indicator--6c5c6ff5-2385-47bc-91fa-0d7c4f212c91", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d308bc-4a5e-48c7-8627-95a8759b9208", "sighting_of_ref": "indicator--06bb7d18-956e-4785-9d92-046c768f6f35", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410638c9-e1bc-4490-9632-e69b528304f3", "sighting_of_ref": "indicator--9432d959-1c99-42fa-ac0c-a67cc014fd6a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b19164a-5d51-4729-9b75-210434e2f2fe", "sighting_of_ref": "indicator--596d2486-0a86-42fb-80f3-d621ee4bece8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d8dd6b-4fdf-4709-97c4-a500f59acce2", "sighting_of_ref": "indicator--6b6ac50f-63b0-4d95-8db1-79d682965104", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34dd4d28-27c3-4825-90bf-c12bf3b03131", "sighting_of_ref": "indicator--03c2f491-96e2-448a-95bd-5d9ac59567c6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98409cdf-076b-4f21-8396-d401201bc78e", "sighting_of_ref": "indicator--30269b91-ad87-45f4-9234-1d029c6f95b7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e503c4c9-ab10-4734-be78-3c00e9327024", "sighting_of_ref": "indicator--82d076f3-02af-45d6-a5ba-52507d274e44", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7921780-1622-4392-97bb-a028c3f78536", "sighting_of_ref": "indicator--95a91baf-f0c2-4bb4-b56d-546ff36284c2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685e9869-fa31-4644-94f9-4423cda235dc", "sighting_of_ref": "indicator--ddfb5ff2-7afc-4d46-8717-51a5b4af085f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b073031-9383-4f8a-b01c-b12c7ef6eac2", "sighting_of_ref": "indicator--c552911d-ca45-4c2d-bed1-0b64dab33618", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89648f49-2c41-469e-80ac-d31e151970cc", "sighting_of_ref": "indicator--ac976d39-d97b-4418-8b48-9efe9546dc86", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d72b18-a872-4685-8711-fc6900059a34", "sighting_of_ref": "indicator--2297d4e2-d9da-4a65-8374-1a2f04b6d3a1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bd0a6b-d8ea-4394-ba63-19e39e027d00", "sighting_of_ref": "indicator--0457326d-9757-4c54-adbc-e7d4413b08f4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feede603-a387-46eb-90a1-aeddac06af30", "sighting_of_ref": "indicator--df520cc6-05cf-42c2-8715-1fc2b1f5a139", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ef05ab-0912-4869-b99a-4f77b1167ff7", "sighting_of_ref": "indicator--f18c8b76-c183-447b-9043-fca5beedaf50", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bce16fb-61d7-41da-b1b7-d6d60dcf7569", "sighting_of_ref": "indicator--71f5bca3-7bee-4255-a0dd-08c3271bf21c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4d6edb-bfcf-487e-8aa4-19e5b3ffe073", "sighting_of_ref": "indicator--7fed4a96-3137-4804-b3be-7b67c79148e4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2446bf-af6c-4a9b-a6d7-d6c1ae711923", "sighting_of_ref": "indicator--d61a19e7-dd08-4b81-8362-56ab81d53c38", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1325f425-3b31-4e80-9159-996ae049452f", "sighting_of_ref": "indicator--c10eb4d5-3c1e-4b83-9a42-b6ca4a167acc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4fb85f-5621-478b-9442-dd34930af0a4", "sighting_of_ref": "indicator--d79aa9ba-27b9-42ea-ab76-383df5231571", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd93c1cb-0d51-4e36-9c6f-5f85c9836d01", "sighting_of_ref": "indicator--f3c33606-5176-4c44-bbce-b652811e781a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123daeee-4b76-47db-b5fc-75abc8127805", "sighting_of_ref": "indicator--73239d6c-ed49-4259-8238-36273da3ba5f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac05705e-5bec-4e1a-8500-f4fb317eb029", "sighting_of_ref": "indicator--e94c95f8-d98e-4675-bbff-a2a754c61144", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760a892c-c50f-4e86-a02b-6fb88fd2078b", "sighting_of_ref": "indicator--e8523ba8-97bb-4fac-978f-3585f8fce74e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33fad52-5d22-4d36-af6a-0c4de651bb52", "sighting_of_ref": "indicator--d76628dd-232c-4c9a-b691-eea0cb46ef26", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8636bb-510f-4bbb-aea4-bdd5f6e3d125", "sighting_of_ref": "indicator--1d5285c5-cd43-4ac8-a676-a6c3e26d3a21", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f119b78d-aa2a-4cf9-81e7-e4a1e7dc13a2", "sighting_of_ref": "indicator--a654c966-b01c-4f61-a3ba-0312519cf8f0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcfdf9c-d462-4483-b0b0-51a9fd9b8b6e", "sighting_of_ref": "indicator--86a0d372-5e70-4c4f-be79-740d116982f2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3472879-7783-4fb4-862a-6367e0c6a9f1", "sighting_of_ref": "indicator--b4da7667-1ff7-4826-9218-bf17901edd4a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5200bfd7-c5d9-4bf1-ace7-ad49c05e8625", "sighting_of_ref": "indicator--daf698a9-e4b1-4e10-9bf6-01d0f7ecc30a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560db9f0-d192-468b-a790-49f16ab87cab", "sighting_of_ref": "indicator--8270e260-ba15-4717-b051-ab6e62d2adf5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e1fb1c-0165-4ba6-bf23-3f46cf747b3b", "sighting_of_ref": "indicator--df90269a-6470-4128-90e7-53db4c159a5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b1a5a0-df43-4d2e-aa12-a965ff126048", "sighting_of_ref": "indicator--f50707fa-ad94-48e0-b95f-d35e3b04d0e3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4288563-37e9-4f5c-a6a9-24645134ce8c", "sighting_of_ref": "indicator--5dc4411b-93a4-4a34-af2b-853a05db75ad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf3ba02-9be5-4d60-8b31-2e59dbe3cf33", "sighting_of_ref": "indicator--ce9a1e70-0c21-40a0-92ff-083965fe3c8f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6344da-49e0-4473-bf62-086eb23a9444", "sighting_of_ref": "indicator--9bfb8e13-62c5-4377-9dfb-ea25e6d638fe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bb4745-3d8a-4e5e-a1c7-39a48168bff1", "sighting_of_ref": "indicator--f90962c8-1111-4492-88d3-f8f5040c44f4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ebcfa0-f1ab-439a-927f-d2455129cc1d", "sighting_of_ref": "indicator--edd974cc-a61e-4e86-b535-c6ee7261ee3a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a37b6e8-c99a-4b26-8877-364a69f4ec55", "sighting_of_ref": "indicator--ec7d06c1-485d-4623-812f-1f033a91298f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb9a2da-9447-474e-8fa1-c90b29622efb", "sighting_of_ref": "indicator--fb6eedac-fb68-4422-96b4-7de1aabcceb8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07514a9-a891-44d4-a92b-0164bc408826", "sighting_of_ref": "indicator--2a711603-10be-4fd1-8194-8ab8bb42af6a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a464f6-8d93-4353-b0d2-dad91f14c5c7", "sighting_of_ref": "indicator--d918f137-e34a-44e6-a123-b77cb3c0d6dc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b54551-832e-4fd3-920b-d8076cd839b0", "sighting_of_ref": "indicator--66f6aae5-cbe2-48bd-86a6-d2c7c733aa51", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b847500-3029-4974-87bc-e06a06d8a73a", "sighting_of_ref": "indicator--827c2f2e-6c37-4951-9c50-5b44cf6d7360", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba75dfd-f561-4922-b56e-8ed60c995aab", "sighting_of_ref": "indicator--397837e6-cca2-4bc2-a4dd-04e939c9e320", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e51303-2933-4608-bae7-803834dc4444", "sighting_of_ref": "indicator--58ad7214-6d14-43c5-8e0d-50bcf4b32a37", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7180fdd6-67a0-4b7a-99af-ea5b005b39e9", "sighting_of_ref": "indicator--df973a2a-856e-4d8d-9582-7a65f6eff73c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9545ee35-ad7a-46f4-840b-30457fc234b6", "sighting_of_ref": "indicator--11e2de7a-22e1-4aa0-b753-cde24900a758", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3ec317-0a80-4050-85d3-1a9c88b1c8b0", "sighting_of_ref": "indicator--af35df81-b159-4cc4-b2a5-75c1bca637df", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7bf0d5-71b4-4f48-ab6d-eb87f07ad873", "sighting_of_ref": "indicator--d05d33fe-3618-41d0-8d02-bdaf50350f73", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948fa953-7df6-464a-afd9-cb8fa6423c13", "sighting_of_ref": "indicator--d687a8ad-1c57-4ea6-98a4-44a3d5c51eaf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ae0988-f5e0-4cdd-81ab-f52df89b92cc", "sighting_of_ref": "indicator--1cc4dfb3-ee3c-4f46-b7f2-5557000dfb1c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5424f7-1653-496b-bea2-7c5da58d66e7", "sighting_of_ref": "indicator--b8fe97cc-0378-4a95-990a-983194a801e0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb42190-7b1e-40f1-8525-0d364dfc1b6d", "sighting_of_ref": "indicator--32e150c9-0985-4a8b-b7e4-e602fea586ee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0980f914-9923-4225-969f-3f5da594233e", "sighting_of_ref": "indicator--d4d25e7f-e6ba-4579-8a7a-664c4ba59098", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a27d6c-d07e-4589-b4eb-691e413d6f43", "sighting_of_ref": "indicator--e4857c90-908f-4143-8630-9ea417354b2c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b7dd88-a053-4012-9e4d-fc304432fbd9", "sighting_of_ref": "indicator--bbb53134-8b5d-4a43-9d18-0799a3248d0e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604b34e4-fb1e-4a84-a21a-ca3b40b4b1bc", "sighting_of_ref": "indicator--c1560ad1-3ad0-4915-abcf-b417357ec2c8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be112b6-48bf-4757-a303-a3f52fcf85d6", "sighting_of_ref": "indicator--79cbf570-3b7c-4c5a-9993-8e5fe2ce58ad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d52394d-82cb-4644-af5d-412414932915", "sighting_of_ref": "indicator--87251830-e349-44b4-a586-dd449b06b1b8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27c13c2-4314-4010-bab6-5cac8da9b685", "sighting_of_ref": "indicator--34cc7196-9a1f-4081-94d8-b1d75bb4f65e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c603c3c-2b96-4d1e-8e6c-a9cd20537942", "sighting_of_ref": "indicator--6d7f7e8a-49bb-403f-985c-e0126cd8cc16", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2341c2e3-f274-4b91-bfc1-b487e2ef98ad", "sighting_of_ref": "indicator--53a9432c-3639-4e26-a185-34e68d42256a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf50cac-1eae-4db9-b9d9-e3885a13cd24", "sighting_of_ref": "indicator--6ab6b3fc-707a-4ec1-a77b-c1907fd2d1c6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596af559-ef97-48ca-bcd0-ca6bc29786cb", "sighting_of_ref": "indicator--3454f8ae-a784-4738-becf-35f42ae9ef19", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba1499b-9736-44aa-bd56-01826e90a7d3", "sighting_of_ref": "indicator--061befc7-2655-48c4-9367-bcc7511dfe07", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcca5d02-1506-4453-8c30-81fedc2830ff", "sighting_of_ref": "indicator--46a28666-be57-488f-b83c-06993a2a4568", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77f4d23-78d3-44a8-80c5-87d72f02c069", "sighting_of_ref": "indicator--76c54571-a21e-4f0d-9ee5-42f59485b020", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809e4e92-7d03-4c50-9a31-da6a822b69c5", "sighting_of_ref": "indicator--ad411aa1-8e67-480f-b62c-e9d8ee1556d4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80da675a-2719-441b-90b2-7053849a4dd3", "sighting_of_ref": "indicator--7bc1c3bd-f66e-4f1b-a523-22ec032eb392", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841de00e-6498-4a77-8c45-8bf36767fcc8", "sighting_of_ref": "indicator--28a5f314-5a07-4819-915e-7bad700c2951", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf44fd0-3137-4103-8e95-10c1eb663948", "sighting_of_ref": "indicator--0df7b451-6ff1-4784-93c5-bd42434dbe7a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5192ac24-eaf5-40b9-94db-de4227ca0f83", "sighting_of_ref": "indicator--cb106779-8585-40a7-a4ff-8f2b5662207e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93370045-7146-4719-a4a9-e42d4e1ede4b", "sighting_of_ref": "indicator--116e983f-dbd9-4577-b249-c9ee89b33223", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a234d82-f3b1-4501-a26c-056dabd7ea74", "sighting_of_ref": "indicator--4fa9e259-68bb-430d-ae68-af614ff41e8f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f932a9c7-2ad1-4143-bf7f-6eacf9020842", "sighting_of_ref": "indicator--4fa9e259-68bb-430d-ae68-af614ff41e8f", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124e54d7-9dd7-4fa9-b75d-d4a1c35b8d47", "sighting_of_ref": "indicator--4fa9e259-68bb-430d-ae68-af614ff41e8f", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06955d80-f4ef-4e78-97ff-fe74e53d3f2f", "sighting_of_ref": "indicator--f63ddfb2-cc21-4a7e-a792-5853bc1f25d9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f92206-5166-4587-86dd-6b9536a3714b", "sighting_of_ref": "indicator--be26813e-5c16-4171-b874-969357a5e160", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39581284-b421-4cc4-8da4-8ebe688cc1ab", "sighting_of_ref": "indicator--51468177-5cb9-4e89-9d23-f6012d60ae8e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe816c5-e734-490f-b4f4-249f66e16257", "sighting_of_ref": "indicator--6a8e89ac-10a4-45f5-8e56-cbd155733cc1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aca5225-3629-45cd-96e9-d352565d0de0", "sighting_of_ref": "indicator--c95431fe-bd28-4f4e-9423-6aa69cad5a8c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d5d590-2ff5-49bc-bf2f-ab0a3eba90d1", "sighting_of_ref": "indicator--ac14b4c0-ef19-4ecc-b5e0-782f41663b4a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7bc9076-fba0-4289-a395-b93a9164946e", "sighting_of_ref": "indicator--73b63c1d-297f-499f-9d79-070fb5232a60", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53ca92f-eaa5-4d61-aefb-820023f2b7f2", "sighting_of_ref": "indicator--39b85361-43aa-4a3e-a5c3-db768dd71d64", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf3575c-1672-4aa0-ab99-88d3458fe49a", "sighting_of_ref": "indicator--562313c4-eb30-44c3-b58d-75bd6a54638c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e2d6a6-d441-487f-bf07-5ad2362b85e5", "sighting_of_ref": "indicator--ab6eb8a6-ca75-495e-b93f-bab5f9fe8ffb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbde839b-f9cf-4618-a8a2-3e3f1dcbd9eb", "sighting_of_ref": "indicator--cf6a6f97-c07b-4500-9b48-58e60832f5de", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb53ecc6-624c-44e7-bdf2-8d28a63010b2", "sighting_of_ref": "indicator--2a943610-08a1-4618-8e1e-5428e72d79f3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad2f29d-f9ff-4bf8-b6d5-1f7a537df8b3", "sighting_of_ref": "indicator--298fa663-73ae-486f-a7de-d9ec6ce25f9a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d809ff1-f878-4500-bf2a-febc008852d8", "sighting_of_ref": "indicator--412d299a-bf48-4617-b33c-3873d7566ee7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f4f79f-f656-4dce-9235-30d34892127b", "sighting_of_ref": "indicator--28910c33-b513-473c-94bb-275679b4e827", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b583e342-6b88-413a-9887-0e7b7de92f7e", "sighting_of_ref": "indicator--9d01e828-a109-4bdf-b2db-227b4ea81b11", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b124f4e-964e-4131-b8bd-fb35fac49cde", "sighting_of_ref": "indicator--828a7d33-3d32-4313-8496-99e9a2f1abda", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7925f569-0c9b-453e-b6c7-3ed33566d681", "sighting_of_ref": "indicator--3fcbd216-12e2-49d0-9181-21d23acdf075", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423948ea-8f46-43c8-ab58-cff163cec96a", "sighting_of_ref": "indicator--c3cc1798-7d83-4b84-99ca-06231fbbc9a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a4a486-7bc9-4f4a-9e2b-32effb896741", "sighting_of_ref": "indicator--144a672f-d9f1-4e65-b11b-b5fb8e973b2c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d305f795-0a8c-4736-9442-c7cbe7797ab5", "sighting_of_ref": "indicator--1522af29-e7de-44fe-ac52-84dc7584642d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99e3be0-fff8-44a9-b20b-4c4a8bbd51a7", "sighting_of_ref": "indicator--816c193e-c70a-4759-97d2-b51bae358304", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98affb7-9078-42de-8bf0-114c58d63594", "sighting_of_ref": "indicator--0661486e-d6e3-477d-b5cd-a6039f046437", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145adc52-bba0-4df3-93d5-bf9aaf4ccbe9", "sighting_of_ref": "indicator--e1586efe-1d25-4ef8-9060-91c6e7d9a64c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ab1dfa-549b-41f7-bd1d-ca57daba5d41", "sighting_of_ref": "indicator--545dd208-86b2-48ec-b3af-8c91897c58ac", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f726b201-77a0-4347-ab8b-d008f306ea7c", "sighting_of_ref": "indicator--f058f3f3-c203-4342-aa4d-21de6e8a5416", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067bf139-fae1-4bab-a750-001817168bc7", "sighting_of_ref": "indicator--e0875276-23f1-494f-8aac-877a78dbae1b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0daffb-55e3-44b6-88a3-1998bc9bfd74", "sighting_of_ref": "indicator--614fa251-cea6-4993-acdd-1f7c70854ba6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6544bea-fe3b-463c-bfb1-46345d5d7f92", "sighting_of_ref": "indicator--eaaf7355-a890-451a-a245-d97f6dd7f34e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b115df4a-4940-431c-b570-d645ee1260e9", "sighting_of_ref": "indicator--40d18ceb-ac73-4892-9713-6fd60df0fed4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52081ca5-1ec3-4ab9-bd01-2be6402a9e6e", "sighting_of_ref": "indicator--ba573a19-8ff2-45f4-89ff-25624d1e652e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14dd94f5-9881-4bac-bc35-046972ddb6bc", "sighting_of_ref": "indicator--266e92ae-1fae-4c6c-9956-151366a38e94", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f8e8d4-6354-4a0b-996c-11a5022ccbac", "sighting_of_ref": "indicator--555cf83a-d09c-434d-8698-1fa908bff7e3", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ea8d10-3b75-43c8-b7cd-0261357c24a0", "sighting_of_ref": "indicator--9d57d04b-ba1e-4830-856f-77bc18189741", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e9ef46-f20e-459e-8c59-941333ecdd69", "sighting_of_ref": "indicator--f9c66c7b-4dfb-4a7e-901b-392ecbe9e2ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ccbb06-ee83-4db3-ba18-30a4aac1f919", "sighting_of_ref": "indicator--2bc1acf7-792a-4aa9-9731-bf933c9851f3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd56f0e-0ac4-4d04-8587-1fe1634babf5", "sighting_of_ref": "indicator--055a79cb-8e61-4a75-917e-178cc4d73780", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542ad0f2-4bb6-448d-9752-6c7d1f119436", "sighting_of_ref": "indicator--f90fabfa-3079-441a-b28a-6622b261039f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576a6fbb-f5e9-4054-a06f-6d7394d3784c", "sighting_of_ref": "indicator--70bbe95b-da55-4ca0-ace2-49fc87c53b52", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706b0438-8e48-4d36-ac6b-52ebf443c709", "sighting_of_ref": "indicator--bfe5ae49-5215-4390-ae06-df6c08ca7216", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c38a79-2806-460e-ab73-616c70328889", "sighting_of_ref": "indicator--6ac52d28-53ee-4171-b829-3899c89c6a43", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbbd44b-f5f2-4753-b26a-cb56ce5bfdec", "sighting_of_ref": "indicator--45ccc003-1d61-4e3e-beed-a5f1eccc9f58", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80aa43a6-d12a-4671-b06d-21515a6cdefd", "sighting_of_ref": "indicator--83854167-2252-4638-bb32-33d3e938503a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5628ce93-f82e-4244-a23b-e7e0c203d93f", "sighting_of_ref": "indicator--c94b3362-d1a3-4b5c-9d02-9373f49e8d15", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7925548-07b1-4d71-ac6f-eec697fa63d9", "sighting_of_ref": "indicator--52a5e4a6-d644-4cf7-816c-d9a51d17bc52", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc02966-fd47-4a5c-a962-d762a80fdf03", "sighting_of_ref": "indicator--2f596661-193a-4ebc-9d23-1d640a3d121c", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e28aed4-8e9e-45b4-8334-845dcf6041d8", "sighting_of_ref": "indicator--c884726c-5d26-4895-afee-d6815cf5ff4c", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6157394d-3e9d-46e5-a319-e8da80aef9de", "sighting_of_ref": "indicator--338282e9-649e-4241-8cab-5c1c57b7da82", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2ced82-4a90-4402-8863-ca47b26b809d", "sighting_of_ref": "indicator--bcf44b18-8375-471e-88b1-66610d5d0243", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7129911e-c77b-4c84-8ad3-2da799647e1d", "sighting_of_ref": "indicator--8caad2b0-0d5a-4235-9f4c-255c6650476c", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a66a518-74e5-4107-920c-cea21138cfd3", "sighting_of_ref": "indicator--e793ea6b-411b-46f5-a98e-7feec7d551f3", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40890302-7a81-4ffd-b427-4dfb3ad6343f", "sighting_of_ref": "indicator--3f4887db-e87f-4a61-83ef-95be318e9cd2", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ad655d-7794-4a70-b499-76cc55e628db", "sighting_of_ref": "indicator--76ee9af2-4a9c-4158-a85f-6d3929bfa876", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8767fa3-fb3d-440f-8dd3-ce7319ecb491", "sighting_of_ref": "indicator--f9a5a396-be45-4c33-8014-0aa7bd55d096", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8fae6e-d618-4788-8565-a847dfee4beb", "sighting_of_ref": "indicator--a273bd15-c24f-471b-b1a3-75884be038bc", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfbf5a6-3777-4ad7-b8b0-55ecc35adb2e", "sighting_of_ref": "indicator--edc6376e-a016-440e-9026-0c717043d440", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3a1979-8087-4fe3-854f-6c3138240db3", "sighting_of_ref": "indicator--bcbd3ff5-0e22-4beb-bc51-9de8dfc2f218", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdc8e5c-04ba-4b54-bb99-ad77086fb681", "sighting_of_ref": "indicator--a37cb9c0-dd88-4107-9ae3-718942613016", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47712579-ac56-4195-a8ce-1441b3a52175", "sighting_of_ref": "indicator--555f94fd-fe93-4d2b-b632-8716e8903433", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c9b6c7-cbe0-4ca0-a511-e1c4a0d98d39", "sighting_of_ref": "indicator--41b28915-43ec-437e-90e1-e0c095fbfd60", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bacfeae-80f2-4506-a102-460b0363c11c", "sighting_of_ref": "indicator--2cb79836-a6d0-47d0-bf3a-954576c95b8d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b1a08e-b6e1-4e13-b582-80daa7f11ed9", "sighting_of_ref": "indicator--2a26f70b-a394-43f0-9aad-2480d6da2500", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148f127f-16e5-4571-aa37-6812c1714e3e", "sighting_of_ref": "indicator--c92776e2-ab3b-4d7c-82c9-80140b4839a3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3801d7c-9f3d-4440-bb7d-7b917187148f", "sighting_of_ref": "indicator--3673ab3a-8a2d-4f8f-808d-bd1c5f7b622b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cda1216-82b4-423c-a74d-d8e2fde54b29", "sighting_of_ref": "indicator--25ea27c4-5f74-4846-91ae-417d362a4b4f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7571a5-b5e5-47e3-84ec-63da59ff98c3", "sighting_of_ref": "indicator--4670df1c-3c80-44bf-9b7b-d49f6926f45f", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d4b211-7122-4431-b36b-a3f45fd5d4a3", "sighting_of_ref": "indicator--2127af5c-7b3b-4495-87b6-91ce6206e2e0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c99a5dc-4c9b-4bdd-8180-b6f5c4923412", "sighting_of_ref": "indicator--2127af5c-7b3b-4495-87b6-91ce6206e2e0", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9b524d-9e88-4dd4-9122-d62227720c83", "sighting_of_ref": "indicator--2127af5c-7b3b-4495-87b6-91ce6206e2e0", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357eaf81-cc0b-4aad-9a18-bdad42efe046", "sighting_of_ref": "indicator--bc5e6ffa-acc5-4d90-a76e-9bf239ce9537", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d710ff-7dde-441c-a849-d202eae4902c", "sighting_of_ref": "indicator--f3868ddd-b466-474f-b324-efce57f080be", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281b5890-b2c0-46e7-aac8-927d4a8bf906", "sighting_of_ref": "indicator--aa55ecf6-d52c-4ae8-a5ec-0ca8aa2c84f5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b2f001-c0ed-4e72-951b-3ff71ba82690", "sighting_of_ref": "indicator--1af9cecc-ad52-4899-9bf1-5f105bdfcf99", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7572888c-882c-468a-8742-c69abab57e48", "sighting_of_ref": "indicator--9890a662-b4b5-4a41-89e6-853e99dcdd76", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f1e648-f035-42f8-90da-a0ea81505ae7", "sighting_of_ref": "indicator--0858916a-9ef1-4802-a7b9-9e6f077b5df9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbafa99-ff5a-4de9-b32d-3c688612ab98", "sighting_of_ref": "indicator--a56502c4-8a48-4851-b43c-35732c9cda54", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99e5c9d-9a22-431c-8cde-1b4eb1ce259c", "sighting_of_ref": "indicator--8333a3a2-6a25-4fab-aaaf-4af08f239b0a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d600d5b7-667a-4be6-8a07-6502ef0c7624", "sighting_of_ref": "indicator--213bb3cb-2d56-4ea2-88ea-fa2604ace96a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdd152b-8d6c-462a-821a-910e32e48c22", "sighting_of_ref": "indicator--0719eb33-9d0f-4afb-a7d4-e62d34be0994", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4f0197-f828-4dd0-8b9d-cb832c09022c", "sighting_of_ref": "indicator--7191a586-ad8c-4b1c-afaf-70c8460a6eb7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e92a240-8161-4cc6-bc94-28d956434c76", "sighting_of_ref": "indicator--8525fbb4-d7c0-40a3-8bc2-ec604d67e241", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1bf5f4-0eb5-4a5d-9902-e55f0ece2462", "sighting_of_ref": "indicator--11bad928-7426-43d5-acc5-6ef00bbcef87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34446426-f5b2-4b1c-bc09-d114f29e3921", "sighting_of_ref": "indicator--32967721-7650-4f09-8067-730233856a1a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61664869-44ca-42d2-8819-e92216e95dfb", "sighting_of_ref": "indicator--45bccd38-8723-46d9-b162-936af3620e5c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc0cf32-18dd-4691-809a-c7c540253713", "sighting_of_ref": "indicator--905f1bd1-f6c1-403a-8b40-d20bef3dcb98", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abd09d9-5db6-4d01-8b5c-1a21910cd0a5", "sighting_of_ref": "indicator--2c36bfd2-b766-424b-8710-ccc6b889791d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696f16ad-f714-42b6-a475-e6f19fed95f9", "sighting_of_ref": "indicator--f7224ec2-bfe6-4803-a8a7-712e1d8ff10d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c7302b-bade-49c8-aa90-bcf3a181decf", "sighting_of_ref": "indicator--c3eea6d1-af90-4d9c-a2ba-22df93a9bb97", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24595bb4-2c2d-4315-ba2e-884405a9ff28", "sighting_of_ref": "indicator--0fb1fff7-c73b-41f7-b716-56dfa38c74e3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4cdb27-deec-429b-840d-d3532bf551c7", "sighting_of_ref": "indicator--cf69b131-aa51-4ca8-a8ff-500ed48e0b33", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1dd4f34-17f1-4c51-b71d-ff63c381ede0", "sighting_of_ref": "indicator--287d6873-e1af-46d8-b63b-715da9a59d3d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f92b6e0-0624-4acc-b1c2-a10d45e72950", "sighting_of_ref": "indicator--830d9380-41d1-4723-b041-d9ad8ad24417", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043b0432-0aff-4310-84dd-68eedd208ad2", "sighting_of_ref": "indicator--11f433ac-4149-42e5-a0fc-6bb8031cc7e4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f20a0dc-94ac-434b-af1c-d875a608564f", "sighting_of_ref": "indicator--8bfe9614-8f6d-4074-ae06-9ae71f65e002", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06316f9b-bd2d-43ae-98b3-f4fa904110c5", "sighting_of_ref": "indicator--183df936-5588-4ba9-be2f-b820eb17c0db", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef35d755-c01b-4aa6-9464-482c4d2adb04", "sighting_of_ref": "indicator--7060622d-19fe-41e0-b840-337149884dcd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836e68a5-8b6e-40db-a95a-b9a6197ebac8", "sighting_of_ref": "indicator--998c21c8-7d6c-4422-b727-8d8137a7925d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18d38cb-a396-4acf-916b-de66ea5bc159", "sighting_of_ref": "indicator--7fd0d8b3-5516-4005-8bfc-01dbd4ebca16", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95e76d6-d431-48e5-8bbc-ae947482610c", "sighting_of_ref": "indicator--554a14f8-c56e-4b05-93e5-aa4329c1ea04", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf44aba-8dc2-4690-b497-3e93d68cd282", "sighting_of_ref": "indicator--25e0c715-94f4-407a-87f1-ca8a531d0001", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa008723-ee7d-415e-b273-8d598184e3fb", "sighting_of_ref": "indicator--4befa92c-785e-4e3c-bd3c-e49dcb55412c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec6a155-39f8-4570-900f-9547b8b6107b", "sighting_of_ref": "indicator--f01b8b1b-04ca-43dd-b938-69ecff669b38", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d91c6f-3812-4efa-ac15-9c669bedf19a", "sighting_of_ref": "indicator--6aaad201-d996-4a87-92c1-00a5a747ef49", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e75130-4a6c-4e5c-9fa3-41e17747a46f", "sighting_of_ref": "indicator--e2b89df1-ab25-4dcd-ab7f-77fd5e630bc0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6545b90-0b91-404d-8a70-7bff6ade3593", "sighting_of_ref": "indicator--526876af-da3c-47de-b0c7-9a27a3922b60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261d335d-5d6c-4c97-8244-aea206ca9e48", "sighting_of_ref": "indicator--e325b0eb-2763-4cdb-954f-b27b43a2eb58", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295cfba6-279f-4202-bae8-2452333d99ea", "sighting_of_ref": "indicator--5725c2c6-fe68-4862-8aa7-1625d9489cab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcec978b-7d7e-4b74-b95b-98b795ba78d5", "sighting_of_ref": "indicator--79f8e28c-41be-4afb-a965-ee1354426146", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9806eae-5bf2-4d88-a934-b02cebb654c2", "sighting_of_ref": "indicator--b6653045-420b-4863-9586-21a9e7a56162", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e375a0f8-d469-4508-bc37-234829af38e7", "sighting_of_ref": "indicator--3bfe32ba-9290-452c-b2d0-54444196dd9a", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235a8930-f4f4-4b6b-bd5d-0172ed9d6e78", "sighting_of_ref": "indicator--42624c57-7083-4511-aeb7-851bd382f9ae", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97daf3d-ff03-4a65-af25-d4cf40af3dee", "sighting_of_ref": "indicator--ee792837-bd83-4623-b929-ed204b248b1e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3277441c-07c6-4f36-9a5f-318abe143663", "sighting_of_ref": "indicator--1551cfab-19c0-4d9c-8dda-7918f83e0d87", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8395069-e91b-466f-9378-bbeef5bc65b5", "sighting_of_ref": "indicator--0ef0773e-386d-4367-b3f5-b6b64a246ad1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8207785-8cb6-47cd-ad82-a365a79c8c83", "sighting_of_ref": "indicator--3a36b047-bdf6-4036-8576-cf8d04b89471", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6255835-7d4b-4bd4-aaca-b877adb8002d", "sighting_of_ref": "indicator--fa815b8e-3c3b-454b-aead-78527f796732", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797d7f86-5e5d-4ed9-a7a7-b00c3143065e", "sighting_of_ref": "indicator--652e5a73-1981-42cf-8ed5-fd99a436b0ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a471c8d-b4ed-4d84-aa7b-4099575dde96", "sighting_of_ref": "indicator--8d2cc9e0-1950-47d6-8f5c-ea94e95f27bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4797005c-c814-4f01-a110-67271cda6ac9", "sighting_of_ref": "indicator--bf59366a-6790-4d15-84c5-7eaa978096da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c641fff-5d03-4dc1-a525-68add43650e2", "sighting_of_ref": "indicator--045deb8b-207f-47bf-92c0-e58ea6d4a87f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ab949d-e332-4947-836a-e51ca74e2c08", "sighting_of_ref": "indicator--4a47f897-a68a-44f5-956b-bda33e01e88e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84644be9-8eef-473a-b122-a56516f6f93b", "sighting_of_ref": "indicator--23f888e3-0023-4be3-9cec-08fb8c34765b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383fadc9-8cb1-4348-a5fc-485b73e19aa9", "sighting_of_ref": "indicator--de093cb4-17f9-4c4e-bd7d-9c76d028ca51", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ed894d-43ee-4a36-8759-b6f8b441b496", "sighting_of_ref": "indicator--8af2718f-0f05-4d4c-b743-17f13817d357", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa63a82-708f-4cef-94e3-fe0d4ffe1913", "sighting_of_ref": "indicator--6f4a8a63-da69-452f-841e-2a278788817e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5dd2538-ade7-4fc8-aae5-6139c6a80356", "sighting_of_ref": "indicator--405aa2fb-70e2-40a1-bb82-122b13d12718", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08e16d6-a24d-4f01-86d3-0116caa87651", "sighting_of_ref": "indicator--c95ae006-5f93-4f10-b5e3-157071cd3062", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8112f3e-dbf8-4138-a899-9e725028d3c3", "sighting_of_ref": "indicator--b3c995f3-eeb4-4a4d-ad5b-c660301854e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5bdc0d-d839-4539-acec-e3044ffe6900", "sighting_of_ref": "indicator--04cd763b-b680-4531-8330-3f67572fe6d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1b5ab7-f932-47fc-8c1c-ddcbcdb6a325", "sighting_of_ref": "indicator--32f0f951-24dc-4b56-a73a-5ba3603285e8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0ed3d0-a810-4f03-9b5d-22cc7efd12d8", "sighting_of_ref": "indicator--78358121-073e-49e9-aafa-3157e1c936b4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886a920b-7df0-4dae-8ed3-f1f533b27aef", "sighting_of_ref": "indicator--054af06f-9239-4900-b835-f25eb7d15406", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467861a5-4161-46e1-81bc-1c4b2d2c64b6", "sighting_of_ref": "indicator--0cde8093-68d8-453d-9882-041320a46bc8", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c18c77-9703-48b6-b465-1dbdb6edc899", "sighting_of_ref": "indicator--2dfb7e1b-c6ec-41fe-9039-20d70e0b010e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b247d5-a16a-407a-8b61-2a0ebb1cb2be", "sighting_of_ref": "indicator--5a75000d-7d20-4b8a-9c3e-7ec08bdb6312", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34290ccc-ba7e-416f-897a-4ec4a6672b78", "sighting_of_ref": "indicator--ce9cc7dd-d396-47b9-af2b-06dff9665071", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2f3ffd-6574-42cb-a0cc-42cfba2577bd", "sighting_of_ref": "indicator--fd7f8893-75c7-4d81-93c3-cf8c7671c4da", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79a4422-9506-4dc4-baac-56e7a117c8be", "sighting_of_ref": "indicator--79cb6c19-0175-4395-a7e3-fb220566053f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752c73db-f888-4609-9b82-1e3e5d24aaf8", "sighting_of_ref": "indicator--4dcf43d9-88c5-4d9f-a449-53154adc63ad", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c788526-6b51-46d3-b307-ac72a900addf", "sighting_of_ref": "indicator--5c933081-b6cb-4e53-96fe-c0cf5aa5d515", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ca1875-867c-4ee5-bfed-dee49a93bca7", "sighting_of_ref": "indicator--3687ebb2-64d1-4948-ac58-b54c7cfe9b9d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a2b777-8970-4dbf-9a21-801a40176aad", "sighting_of_ref": "indicator--f3a15a6d-c183-4796-9a76-b198832150da", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b732fb07-f68d-42f9-a7ee-009c236ff4ae", "sighting_of_ref": "indicator--6ac2e2ac-d438-4d69-a04d-c2c2db2d742f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be660f60-14b6-44a6-9964-fde05bb3287e", "sighting_of_ref": "indicator--6641048f-06be-4332-88cc-0950fa7887c0", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0abe263-e301-410f-b43d-4a989c924bce", "sighting_of_ref": "indicator--900c98dd-304d-4d17-811e-8def8a7746cb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a58f0d3-5a2c-4dca-b9e4-add89b39e28c", "sighting_of_ref": "indicator--900c98dd-304d-4d17-811e-8def8a7746cb", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db420804-4e14-447f-a34f-81958f5e886d", "sighting_of_ref": "indicator--aced0d5a-35b0-41d6-98c0-d111d94d241a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a173cb83-ca8a-4750-9047-83e8e710d908", "sighting_of_ref": "indicator--d6e985d3-be0f-4f91-a0ef-2e18d720c96e", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043a039a-bab6-4227-ab74-83162d77b2f5", "sighting_of_ref": "indicator--88e2a231-0ce3-46bf-92e9-7034be836545", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531bd45a-3175-4494-ab76-390a2b03a2e5", "sighting_of_ref": "indicator--b30b86ee-e399-42c3-a945-7023f4fdf55f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2629348-b92f-4b14-a5b7-b4c2443efdb8", "sighting_of_ref": "indicator--12530cfa-9716-4e9f-a8f7-021e8b963e59", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a27852-7fb7-4b71-b45b-1b348eb9bcff", "sighting_of_ref": "indicator--f4fef336-7607-40b4-8311-75fb9491c855", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6554cd-a094-4561-b116-5ead35b79fa8", "sighting_of_ref": "indicator--24ab438c-b0e1-4361-acbd-b9697550f723", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53885393-8472-45ce-bf53-126cd175f45f", "sighting_of_ref": "indicator--a7c9ea21-92ae-444a-b343-a01eb01108ed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d0cc5d-b882-4025-9236-bb6e8af875d5", "sighting_of_ref": "indicator--6a9f7c0f-90a7-47df-ab7c-28485b03a278", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7b5e86-bf23-4535-bb55-d9772e4c3267", "sighting_of_ref": "indicator--57feca61-3d50-4854-8b09-dbceab5b7e07", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb91463-58cc-401a-a434-3166e33275da", "sighting_of_ref": "indicator--f8fbf546-bd14-407f-9d81-ff7ba788e3ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dea459a-846d-492a-856e-8d9f62bf3336", "sighting_of_ref": "indicator--f822588e-1fad-43dd-a8d7-b94f2c1f061e", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98bd6927-bb10-44b9-8179-f137c0d017a3", "sighting_of_ref": "indicator--0cd8c0e8-3f19-4349-a002-ece5b8e1fa0b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a510d015-6729-4530-83c6-5630d1fa29a2", "sighting_of_ref": "indicator--82b6ae48-e216-4d7d-a752-54354c6e158b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f708887-f85e-487c-b6cc-cdf4ee5fd52c", "sighting_of_ref": "indicator--ec221804-b532-453c-955b-eb2ac1c17a78", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57935a4b-1c72-4a4c-97a7-9b4f39d008c7", "sighting_of_ref": "indicator--d01b0eee-7575-456e-934d-0ac4d4901868", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e66d4e7-c790-4b00-b424-9ea1a0b22c67", "sighting_of_ref": "indicator--a97644fa-99ef-4f74-8b98-c1db4e58f443", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f177407e-b326-492b-9a48-2defd20d9bf9", "sighting_of_ref": "indicator--2ffa404e-afa5-4339-81c4-406da16fc4e7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03491a2e-b99d-4943-b3cc-f0d5ece751c4", "sighting_of_ref": "indicator--2ffa404e-afa5-4339-81c4-406da16fc4e7", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7227a8b4-87f1-42c8-862c-289ea67beff3", "sighting_of_ref": "indicator--2ffa404e-afa5-4339-81c4-406da16fc4e7", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f739910a-a50d-4bbf-9570-91bb187789db", "sighting_of_ref": "indicator--798c081f-4c50-4224-aaf0-e11ec83ece57", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ef86ec-7548-4b25-9b24-1c3f003eb223", "sighting_of_ref": "indicator--a450655f-aa11-4f6a-a545-9f077aaa3e0c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381bdb61-c99e-4272-bf67-d855021b19e5", "sighting_of_ref": "indicator--a450655f-aa11-4f6a-a545-9f077aaa3e0c", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d2fccb-4cab-4bff-9ca2-b03e058d9ee8", "sighting_of_ref": "indicator--a450655f-aa11-4f6a-a545-9f077aaa3e0c", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991e111d-ba1b-43c5-ae72-e830d5aa862b", "sighting_of_ref": "indicator--dec3447b-61d9-4f17-8708-4326384edac8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ac0ce4-de78-4dcb-917b-387bb66e7649", "sighting_of_ref": "indicator--dec3447b-61d9-4f17-8708-4326384edac8", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb472a97-9f3a-4182-92e3-3956c3d3a788", "sighting_of_ref": "indicator--dec3447b-61d9-4f17-8708-4326384edac8", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f977a9eb-fad9-4975-b043-f55c9df853d1", "sighting_of_ref": "indicator--316f4e5c-d37c-40f2-a05f-11cbaf69c725", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522d453f-311c-43c1-9691-c29adec9be42", "sighting_of_ref": "indicator--38e2eed9-d187-4fa8-9043-5f2d237cf239", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdde3149-f9b4-4b4d-8f71-576c86b9422b", "sighting_of_ref": "indicator--c97da8d5-9327-42ed-b06e-0b22c7effe33", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd20e6c-6806-4412-a092-c95e038ee11a", "sighting_of_ref": "indicator--0e8ef28c-11b3-4595-a88b-8f29e5c0546f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33441be-0f22-45ff-b507-12e5cd4a4242", "sighting_of_ref": "indicator--53239c1a-4e7b-4dbb-9d24-41e096cfc959", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eddaede-21b9-4383-96a8-ce0992f7b30e", "sighting_of_ref": "indicator--c273186a-2d0d-4be3-8dd7-b0a65201cb3c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd31ccc2-e023-4897-b8ce-5ba7aee18430", "sighting_of_ref": "indicator--a708a489-46da-4c60-a76c-16dfb380943a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8afa165-9301-412f-8a6a-569cd6d30ec2", "sighting_of_ref": "indicator--d9cc0f05-9817-457e-ae71-bd762cddd22b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14da4c0-e977-4213-80ac-6227f38f6d4d", "sighting_of_ref": "indicator--965c0b59-dd94-4341-86ee-8db56427654a", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a7486b-82e6-429b-82d9-ed479754400a", "sighting_of_ref": "indicator--4cea9706-d702-41aa-b213-523dec55be0f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7a7b0a-6c24-472b-9503-577f9e9c3310", "sighting_of_ref": "indicator--1d55c59b-624f-4ec2-b8a8-6a84fc1cbfcb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73604db9-77af-47e4-a1a8-1d702aa7b0b0", "sighting_of_ref": "indicator--e3738f7e-5de1-455d-8a85-cd9ee070131a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891402d4-1638-4ccf-b521-7268bc6693f2", "sighting_of_ref": "indicator--660b0c9d-5f6b-4474-ad2b-15d42ce6b99e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155b8e45-ed8b-44cf-a441-92e15efdcc18", "sighting_of_ref": "indicator--f2b0d7c2-e765-4773-b7fd-58bb845529d0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5332ceba-2184-496d-b0f1-da8215e76bff", "sighting_of_ref": "indicator--439151ef-3d44-4d83-abf7-f720757ca10a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d73e385-1f0d-4287-aa50-e85acbe5f55d", "sighting_of_ref": "indicator--403dbaea-b10e-42d6-a098-b7d9045537cb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e89505-7c4e-4d86-aceb-d5be710b0595", "sighting_of_ref": "indicator--f138803b-29dc-4076-9be6-3ece0da6e68c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8544d1ca-ed6c-43ce-84ce-d0891962a861", "sighting_of_ref": "indicator--82b424cf-17eb-43f1-9462-9aafeab10ed1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d8c786-610b-47fc-8f75-0abf7c204ceb", "sighting_of_ref": "indicator--add56ffa-67d9-46a7-bcee-0cc75101b505", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bef52a-5b68-4e05-88b1-48baa8fb9829", "sighting_of_ref": "indicator--2d303a79-8f01-4ced-abe4-257f1b77e524", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a183e5-dc3b-4296-96c9-41193399390c", "sighting_of_ref": "indicator--b192d877-3d08-4565-80db-ae6e9b8e21ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da96e189-99c6-40ec-8e7a-e1c828014b81", "sighting_of_ref": "indicator--80d7f69f-950c-431c-bc71-516e848b8bb4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249bd4df-4e51-463c-b935-cdad8a30d61e", "sighting_of_ref": "indicator--0f6e6551-6505-46c4-b2d4-0e2138f58a73", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4705488-eaea-4817-942a-d33f0b17d64e", "sighting_of_ref": "indicator--d8e7ff93-3ccb-4d6c-9977-4cb5f05a94d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3458767b-4a0f-4c87-8603-efc1f44ebc70", "sighting_of_ref": "indicator--a7b06c76-cd53-4f2b-8fcd-bf3fedf950e8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74079c5-8838-4f8b-a4ee-7ebd07fad6e2", "sighting_of_ref": "indicator--30752bea-1f83-439c-b14c-151a3ebee534", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760b0478-b511-430d-9176-42223db467e4", "sighting_of_ref": "indicator--bdd8ea5b-8c4d-4b94-97e3-3f2b3c5a7bfb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a825f20-bcde-4ae6-9512-1373c7307d8f", "sighting_of_ref": "indicator--9358ee2b-27fd-4be5-a120-3de008272aad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9a1917-ba1c-466a-9048-876eb6bfcd46", "sighting_of_ref": "indicator--7f6d5b81-6fea-4653-a210-80867027720f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018cefae-8370-4f0f-8959-ee14ea85849a", "sighting_of_ref": "indicator--6cc8890d-c278-4cfd-8c04-7eb60d974bc9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57009603-18d0-4231-a7c6-0f97c7ef283e", "sighting_of_ref": "indicator--391ddff1-0862-42a1-9844-2eb53dd27245", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c38d8c-fca3-41e3-bd0d-6c3ff19b51ba", "sighting_of_ref": "indicator--a1e7149f-19bb-4a3f-93c2-fb3ec1e5b5e7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22969678-88e5-434a-a142-d275f1299907", "sighting_of_ref": "indicator--0bafe004-547d-4733-b92f-d2dcdec816bc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb75d0f2-6a76-45ce-abf9-3d610eaa5c79", "sighting_of_ref": "indicator--ee130460-9130-4a58-94ea-f0f69ad14172", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842f7ddf-76d5-4f86-8f75-9fb1dd61e054", "sighting_of_ref": "indicator--81a115af-769f-4dbe-846e-01a3cbc291ee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8832d3-ed40-42a1-8484-86ad7bf36b9d", "sighting_of_ref": "indicator--bd6cc171-481d-410a-baa9-eaf266527fa8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb8edeb-698b-4356-9858-40cdb1a24660", "sighting_of_ref": "indicator--b1669667-8250-40db-9ca9-3e31b4ef6a3a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f079d02-cb0f-4e2f-bafe-8d6616a665c3", "sighting_of_ref": "indicator--4eda5d70-9e5c-4632-ac26-483d6a4b9980", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b3725d-4699-4114-abff-a886801b5ef2", "sighting_of_ref": "indicator--5d4125d0-ba51-4823-a8d5-8b9e78645d2a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe4461a-315e-4d4e-a680-ece3eb4951f2", "sighting_of_ref": "indicator--36c5bd89-e1f2-4804-91de-847bbed7e60a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5eebcf2-02e0-4d3f-8947-2a5379077331", "sighting_of_ref": "indicator--e07a743c-411a-4977-80ce-6c4d03e02e13", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a9513b-8fb4-4333-94b1-733b2133d89a", "sighting_of_ref": "indicator--fb05ac21-4a8e-410f-8d22-f9cf226feead", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d947618b-033f-462e-86b5-2bab23ddf4ab", "sighting_of_ref": "indicator--e11321c0-cc1e-4158-9072-53dc408c5d0d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a3372a-2cbf-45e1-9f20-7e098219388c", "sighting_of_ref": "indicator--b0cc3666-bdce-468e-b973-dab961a0769f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6f0ec7-81f9-47c6-861a-324986c050aa", "sighting_of_ref": "indicator--470af2d0-d3cd-4a93-9c50-ee0d6c835444", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9206a1f1-9c3b-480d-a04d-3f2f94141f73", "sighting_of_ref": "indicator--2d0f7687-5977-491e-b322-bd11e997eb6c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2115800d-43da-4d12-bac6-56c66055b244", "sighting_of_ref": "indicator--21544e3e-b850-4f34-97b3-9b49318edc27", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6acf437-e0bf-41b9-a1d0-e2597ce530ea", "sighting_of_ref": "indicator--b7e3e964-8cb4-4c20-b74d-0ea1c2ddf17d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37e3856-c1fb-4911-86fe-4ad4a44212ef", "sighting_of_ref": "indicator--19bd1e6b-63c9-4e51-ae61-f9fe0d65df82", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6a1fd9-2878-423e-87e9-a41ea913a27d", "sighting_of_ref": "indicator--eb78a3b1-3f2f-48ed-a7e8-31c1d3908cb8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae5acb5-3967-4096-9309-ae3d56a29e06", "sighting_of_ref": "indicator--004d7851-a9d2-4969-a173-73b3ccaee8a1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cabd06c-a99e-4ffd-97a1-71dac6ad0da2", "sighting_of_ref": "indicator--ed3da2a5-313a-4381-afbc-4792e3f49921", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1399e3-aae2-4971-8238-40c11fe7dec7", "sighting_of_ref": "indicator--e80d96ad-aa96-4753-804f-9e75254f9ec2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b864b8-5b8e-4bcf-a2ea-06fe233c54b6", "sighting_of_ref": "indicator--b63f01d3-833b-4a00-ad93-01135e0319c3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f267eb00-a4f3-41d8-98da-4e6007728392", "sighting_of_ref": "indicator--8363d679-e933-413d-aa1c-0c8a6bad0ae9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d7d4d6-0ba4-40e9-accb-8afeef68ca2a", "sighting_of_ref": "indicator--3e26e806-c87e-4dd6-a19e-b8cc292f42d0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68f200b-4dc8-42dc-b4ed-2bfa2f79a101", "sighting_of_ref": "indicator--f96b2b4d-0fb8-46b0-8bf9-c217ecc37d43", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2c1b64-21e9-4eb1-b857-2eb3daab7102", "sighting_of_ref": "indicator--f134f646-4d6f-4008-9c5c-6729275095c0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52955bc9-b2bf-431e-89a6-b8965ca0f507", "sighting_of_ref": "indicator--a32895fe-5b61-4ae0-ae9a-4379919ece9e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f5867f-e996-4f53-90b4-aa2e51ed1fab", "sighting_of_ref": "indicator--99b6276b-b649-4475-a352-da0da783d419", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da3ce91-5629-469e-bd05-b935233a1a50", "sighting_of_ref": "indicator--db6224ae-f961-4897-b65e-66161dcfed86", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9d37f5-e1cd-4734-9d24-d6ca59e61056", "sighting_of_ref": "indicator--5fc679f2-3808-45a6-927e-c14ba9688009", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93662d5c-7bd4-4067-9098-5c24a1b3c654", "sighting_of_ref": "indicator--390f94c9-68c4-457a-bc29-ecf3b36b3dec", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f82ae8-eeeb-4cd4-b69b-79e8f49bdede", "sighting_of_ref": "indicator--bba6ef43-85b5-4666-bf33-70541f5e97c2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dced6f9-8e79-4360-980d-03045e19d6cd", "sighting_of_ref": "indicator--83b0d936-f734-4bca-8cf7-80b04963c6e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec44152-a87b-4530-ad6f-b505b4670b73", "sighting_of_ref": "indicator--8dec3cf9-8b0c-44ed-9cc9-3f9e0be7f738", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff03739-3bd2-44ee-95f4-5b1d45381c18", "sighting_of_ref": "indicator--fecb1f54-9875-42ed-a880-8f6766a46cdb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81adb2c-d7f1-4eb2-947c-d12853f33912", "sighting_of_ref": "indicator--334e1028-58a9-4b70-a9ec-174ed29050fb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bab2aa-3360-496c-b517-a33c7025a0c7", "sighting_of_ref": "indicator--88c64e1b-fa50-4ded-b7f0-61966f298861", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711c590a-debe-4886-a583-fe0b47b2053f", "sighting_of_ref": "indicator--68007b58-2b13-4ea5-9ef3-df126b6400e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31506c99-e591-4c0d-a755-d65621739216", "sighting_of_ref": "indicator--e47aa075-dd8b-4045-ba1b-d86c71d12b94", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4ceeca-fe37-43f6-b2e6-de3f05314dbd", "sighting_of_ref": "indicator--1fbf4ada-a2b6-4a95-bc53-f6fc54a7c5e7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487b4c79-e038-473f-b6c0-23151d1de1fa", "sighting_of_ref": "indicator--431cc3a6-7709-45ed-81bc-9dcebbe8a85c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34304f74-17a2-4ad8-8c8d-ed05f508c2f4", "sighting_of_ref": "indicator--7ae51d97-1be1-4d0f-bf6c-2f0a1ebd0380", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c62c4a-07ec-4480-a2f3-c220a8f2bb49", "sighting_of_ref": "indicator--3b3084b4-27da-432e-80b3-8b2712eda2dd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3c3a5b-c581-447d-9298-8cac05f9365a", "sighting_of_ref": "indicator--c5444567-876e-4a01-bdc6-1520c7422e36", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3a2d6e-aae8-413f-a630-83e05b35d0ab", "sighting_of_ref": "indicator--12daa5a8-3c1d-4797-b90a-6d1dfa548b35", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99f38ed-38f5-4d16-a5b3-546645adf4ec", "sighting_of_ref": "indicator--54334a21-890f-49de-aae6-e7cbf599e02d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4b369f-e6ad-4e91-ba71-c5203aa1d686", "sighting_of_ref": "indicator--3f22329c-592a-4843-93af-e2f447081d12", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c027a9d0-968b-42f1-afb3-999bd1873ec0", "sighting_of_ref": "indicator--352a0a7e-c2a1-4624-93bc-e9bd079c857f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0348a5-e20e-4a8f-80f8-fc825fac6bb5", "sighting_of_ref": "indicator--94fbadbf-7db7-4258-889a-49d7edc6ae68", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742ea3bb-2105-48e1-a4a2-c796835c439f", "sighting_of_ref": "indicator--45d35ace-2f3e-4806-bc1e-fd25c4c73e2d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edea1d6-1a7f-4df9-a2cd-6fb1bae81848", "sighting_of_ref": "indicator--607b1f32-1f69-405a-b1d6-5b41d2274d6b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3a2998-37e9-4b19-93c6-0664bfcb6edb", "sighting_of_ref": "indicator--a06cbec9-5614-4169-a638-186823441f70", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f66b362-87db-4187-882e-4994b48d804a", "sighting_of_ref": "indicator--588681d8-c1d5-45f9-a8a1-f5aefed3a20d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74306c9a-5d5e-46a2-af5d-becfd073b3e5", "sighting_of_ref": "indicator--923348c9-c616-436d-9405-8208da4810ce", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1725fecb-e220-487a-abc2-180b9c50ac4f", "sighting_of_ref": "indicator--923b6afe-93bc-4b49-8c0e-64d3bdb11484", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de68a0e0-60b1-4617-bb2b-a3c31ffb6a2c", "sighting_of_ref": "indicator--51f1d27a-8108-4066-883c-ba9397f5b759", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28dff89-e1f8-49d2-b36b-4ea012f9c12a", "sighting_of_ref": "indicator--ce837717-7342-4719-8ed3-ce2401b64bed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5844769c-29aa-4f60-9cc7-8b51b6e02cf7", "sighting_of_ref": "indicator--e9189f90-976a-4c7b-9104-ba28ef1df1e9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c30981-9970-4edd-8e3a-c61371b852b4", "sighting_of_ref": "indicator--2c851c88-9e56-46ad-a1b6-559df711c894", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a495d9da-5dd4-414a-92e0-8fb7b6d5cd0e", "sighting_of_ref": "indicator--ba3b6a01-a1db-492d-9ef3-ab3271b76359", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08334ba5-07fd-4abb-b66f-37b89751007b", "sighting_of_ref": "indicator--08ae93e1-aa41-41b7-b7f7-f2713ab3c8db", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fd8735-da7d-477c-9cdc-e175039c6abe", "sighting_of_ref": "indicator--4272dac4-eccf-4474-a072-56c318bdcecb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4853a5cf-59bf-42fe-9434-0c3077535912", "sighting_of_ref": "indicator--c1632089-d19e-4725-b83a-bc07893a1488", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b91a34c-e930-4022-bdbd-976b6fddfac5", "sighting_of_ref": "indicator--6ace024a-2299-4f81-b07d-9d65c772474b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5d14c1-4916-4b91-b17c-7894c016530f", "sighting_of_ref": "indicator--8ed94d17-2caf-4ac7-a6ea-4ddffc92da84", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf07d0e7-9a91-48f7-b9ec-2adf59366918", "sighting_of_ref": "indicator--94c4e488-7bda-4dd4-a254-eb3f29a40b9b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532bfc77-4341-4c60-80b6-e7c3ecfdde40", "sighting_of_ref": "indicator--64c18338-d069-48bc-847b-7696399086a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665dbfd9-598a-45df-8f4b-73f1e5482388", "sighting_of_ref": "indicator--c18e8ea5-769f-4a10-affc-59066575ad8f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e71d3b2-c6d9-4a91-bd85-9df0c1baff2c", "sighting_of_ref": "indicator--04109964-cc75-4e58-8d8c-b65fa8b98d44", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664a01e3-0bb9-43a8-af86-ada762ef53f7", "sighting_of_ref": "indicator--8819237d-a478-4e62-a8c0-ed655d147276", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe619317-dda6-4248-a7b4-1069e5124977", "sighting_of_ref": "indicator--689caa65-61e2-45a2-8493-18c49205f88c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d37c54e-d0ac-40a7-afdf-9a2bc9ebb755", "sighting_of_ref": "indicator--db39e921-af86-4039-bd4e-7335e21c3596", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83971197-2e7e-4bd8-920d-9d0a88dbb7f0", "sighting_of_ref": "indicator--5d0cb334-85c7-4fdd-8051-380b91584c88", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75cd4fd8-41b2-47be-8370-b4b6ab8d3898", "sighting_of_ref": "indicator--bab96fea-1d5a-437a-887f-4ee118367937", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe82dc3-9a37-4edc-a84b-b315e1ecbd70", "sighting_of_ref": "indicator--f154bc11-f7fc-4537-a207-891e424c4e10", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11249e5-53a7-4254-a66b-ff9f65b6e21d", "sighting_of_ref": "indicator--dd0b24e7-d380-451a-9520-537f12d3ba66", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55dea25c-ee86-4950-9b10-f27b8476a793", "sighting_of_ref": "indicator--6a96a40f-b9c4-49fd-bff3-02dc6ea81aaa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46be1d5e-7166-4b61-ada0-59ae65b24567", "sighting_of_ref": "indicator--6cab0a14-ed76-43fc-a4f6-93896e60c507", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1df2bb-b313-46ec-99a7-68a600b2cfd7", "sighting_of_ref": "indicator--94977cb8-d784-473d-adb6-36369a7bd241", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286eb4eb-b3a5-4785-a827-14a5485b2abc", "sighting_of_ref": "indicator--36474e2d-830d-4243-95c2-c6490b1a4783", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d086d59-89bc-43c1-9c30-39f453d872bd", "sighting_of_ref": "indicator--d0a614ad-f3c7-405d-aa30-9462f08f9624", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e891dfbb-0299-4814-b905-4af3f0fd22e1", "sighting_of_ref": "indicator--f38cbf58-4dc9-42f0-b633-dd4f38c14280", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9a29e8-61e0-44e6-9b45-b61a38e177b0", "sighting_of_ref": "indicator--6af33a5e-1851-4a24-b142-95b3c19a753c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312180b4-cd74-438f-bea1-2d0657b6142d", "sighting_of_ref": "indicator--f66a2976-f7ba-4590-b4f6-480b2cb7c7db", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab65938-1bf9-46a0-bed9-59ea4dbccab0", "sighting_of_ref": "indicator--28a23076-ed49-41df-bd97-0f789187338e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f27b957-91a3-4692-967d-45ecff626f94", "sighting_of_ref": "indicator--b57fd00e-12f9-4935-a741-cd9470741018", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f141bc49-6ba0-4f37-9597-56650f79c077", "sighting_of_ref": "indicator--2fdce5f5-fbaf-4a00-a93c-d3e0fc2df336", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808ad4e4-4d1e-4bb1-9eed-0928b69c7642", "sighting_of_ref": "indicator--479ab558-4e35-42fb-960b-f92b122bef7e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43774937-e2d1-4ff8-9f40-220cff567512", "sighting_of_ref": "indicator--1a337010-ffe2-4536-8b54-a77e153e4673", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646fc3c6-322a-433d-b2ea-a6defa8e0026", "sighting_of_ref": "indicator--c74a417c-2ef9-4c54-bffa-e69f295e80dc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2506644-30f6-4d1e-bc38-062b2d8fb4ea", "sighting_of_ref": "indicator--d6bc3645-79ca-4bef-989a-632f4b61856a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8799fd27-5c26-45d7-a534-aaea0bd9f1fc", "sighting_of_ref": "indicator--f2cf4012-7f51-47b8-8976-d6c931101dbc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8919766-d8b5-48a2-a4f9-afc5d0a153c3", "sighting_of_ref": "indicator--9b134a23-61cf-4633-895a-cc09154624d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f1375c-5524-43f0-bf85-dbd51da96b60", "sighting_of_ref": "indicator--2cd5685c-5708-491e-8d5a-6b26bbd90c94", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60178ed8-cc0f-42ec-bf4f-c68f31dd6108", "sighting_of_ref": "indicator--937d7b4a-ddd8-4b9e-8047-bd4deb44a47c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b1a880-f1bd-495b-812c-409a6e5eac6f", "sighting_of_ref": "indicator--e9389b52-9b06-4080-9e21-3df727a5e247", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4cab64-3d11-4ed0-b81d-467461785e4a", "sighting_of_ref": "indicator--decc2e97-2ba3-448b-9325-f885a48151d3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86047b8e-b8f9-42e2-9db8-5e3a99c9267e", "sighting_of_ref": "indicator--47a5cb50-c7b4-4192-b671-f166b6dfd255", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df911d4-84f5-4aa7-bda0-047d15c827d6", "sighting_of_ref": "indicator--5078f198-2e77-41bf-86de-564f669710e3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c57b796-17cf-4aa0-aac6-1cee06c8600c", "sighting_of_ref": "indicator--95be3a13-5a8a-4311-8547-3f899e2c28f0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1e827e-fab8-4b2a-bb90-4d1acf65eea0", "sighting_of_ref": "indicator--d3feca1d-8dfe-421d-b3ed-6b60db5f787a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb2ce4e-abcd-4db8-9e01-377ac2e40c9d", "sighting_of_ref": "indicator--30fc763f-d763-4452-9414-429ff9e95eec", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1403bc49-e5ea-42f5-84dd-3d42c68ba223", "sighting_of_ref": "indicator--ef4ec792-7fa2-46d3-a8ee-35dc3450d3b0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff60cc8d-ed9c-4613-8854-d72fe0684674", "sighting_of_ref": "indicator--d51685b3-4151-469f-8f0f-7da9457da651", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bb3e59-b822-4c63-b3a7-c89aa5d21618", "sighting_of_ref": "indicator--77228d60-2680-4f32-a16b-a6d343ff5469", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4619f4-6284-4523-8a38-c72972643560", "sighting_of_ref": "indicator--7a61c71b-0041-42ce-aaec-1c90360f522c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7191b86-b4bf-4bf6-8a32-fdaaf27cc302", "sighting_of_ref": "indicator--d20efaf2-a6e8-4859-93ea-e94b645f216a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0061bc8d-844e-4133-8f1c-edc3db1515a3", "sighting_of_ref": "indicator--f98dacbf-aff2-47f4-91a7-5bbcbfd23684", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee17bc46-bac8-4e3a-b308-bb22878466dc", "sighting_of_ref": "indicator--ad2f74cf-97be-4ffe-9adc-1db6c9ab1af5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521d4e6e-1d36-497a-be94-e7e29ffa2d77", "sighting_of_ref": "indicator--1b5d6efd-4647-4bf5-9332-db558aee6642", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5c0f87-89b4-4626-a090-84680cffca0e", "sighting_of_ref": "indicator--10f7ded0-ab82-44b3-a06b-7547f1af40eb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbd5e36-e044-4098-a275-82769ec427ec", "sighting_of_ref": "indicator--219b8812-4562-440e-8e6e-6c2fd62d6107", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd33cd8c-22ef-4886-ade2-5db07458de13", "sighting_of_ref": "indicator--9862f576-59a9-41fe-8bf4-f130327184bc", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e09287-b74d-4c7a-912e-6800b720d4c4", "sighting_of_ref": "indicator--284392d3-6bc5-4d62-8246-53fc9d9d6184", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ded1092-1245-4823-8e8e-1e9c15ca8ada", "sighting_of_ref": "indicator--3e675c34-d49d-4d3a-a25c-667703b7aba1", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c0afdd-dffa-4816-a680-02c952fa5d8b", "sighting_of_ref": "indicator--8e2ba5e5-cc72-4f6d-9644-1f627cfb2f94", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215e002b-dc57-4371-9921-98ac018d65bb", "sighting_of_ref": "indicator--8e2ba5e5-cc72-4f6d-9644-1f627cfb2f94", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800937c8-7017-4aa3-a014-2bf2d9e06389", "sighting_of_ref": "indicator--b70a6930-ad0b-4530-adc0-8d494e41d3ce", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f262112b-4ba4-4d6a-883a-d582227a13f4", "sighting_of_ref": "indicator--a02c8be8-88bc-429b-b736-f6b7db2dc102", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5af3726-0e8f-4324-81b6-89f487e68936", "sighting_of_ref": "indicator--57e872eb-ee85-4f67-94fa-f65093c41d6d", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3507916b-39a9-47c6-88a6-13bff5b7b7dd", "sighting_of_ref": "indicator--1065e197-ee49-4486-a392-dd929b214d91", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd66c1b-ba04-4278-ad7e-895c09ea0340", "sighting_of_ref": "indicator--dd542487-0149-4d6d-8543-c9d2d5968cbc", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848c1b8b-9a1f-4481-9ae7-b041ab6c4f71", "sighting_of_ref": "indicator--c0df344b-5dd8-4431-9acc-bc36bed5160e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8188c07-9cfa-4064-b975-87a74b3abc19", "sighting_of_ref": "indicator--c0df344b-5dd8-4431-9acc-bc36bed5160e", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cc9c8a-8bda-4206-adda-a7ff5952385a", "sighting_of_ref": "indicator--ddd5bed8-4716-46b6-9e9b-bd0a6de0c4f3", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a750bc96-e536-4319-8362-c54fc523aa38", "sighting_of_ref": "indicator--fa607a04-4a9b-4461-8603-0eabacba54d0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6dc996-e6d0-4327-9688-5064a40a87fd", "sighting_of_ref": "indicator--3448f970-657e-4739-8f83-966795216362", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b82792c-6d21-4fc6-b557-a4544aae3a93", "sighting_of_ref": "indicator--f43b5321-d16b-43a2-a6a9-515333fd8ee2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b8a2a5-5db9-4115-9a14-5161d19fc9cb", "sighting_of_ref": "indicator--9cc85129-fa60-452c-9fe2-5d5b27351a62", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc4bebd-6967-4629-a51b-c7d97bc7906b", "sighting_of_ref": "indicator--549b9064-a0cd-4f1e-82a5-7c74beb3bff6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9162ada9-2931-4705-9f5e-e5bbb6459e72", "sighting_of_ref": "indicator--0222ee52-39ee-46c5-b06b-f47d4c9f373e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9eacec-7903-4e58-a175-be98c3548d66", "sighting_of_ref": "indicator--cf3db5d1-82d5-4938-b0f0-e1bccd1f4be0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cc10af-6adc-40c4-8a73-274249f6ee92", "sighting_of_ref": "indicator--9e55f8e9-4b15-4155-ac68-4b5f846b8ffa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42399bcb-72f6-43c7-86a4-3098558aed9e", "sighting_of_ref": "indicator--8bf9c9e5-b6c4-4071-9a3e-2c431fab31be", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09ac7a7-8c77-4d67-9c91-02b6298a9a6d", "sighting_of_ref": "indicator--20d5e624-c8d8-4d4e-bf4e-f106f523cf78", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4cf437-0848-4a1b-a6aa-1bd2d50fbb2d", "sighting_of_ref": "indicator--6493d386-8b6f-4aa6-acd9-77da3184860a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9343f466-0a0e-4bd8-8a3f-37708e855445", "sighting_of_ref": "indicator--c37d87b3-97b4-4847-b59b-733a30113a03", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8571a47e-f6d4-4aa4-b395-93f32c85adbc", "sighting_of_ref": "indicator--1cbdc81b-ade6-4973-ba13-79dbc7686459", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a26705-4ab3-49c1-a7de-48aac0bd53ae", "sighting_of_ref": "indicator--c7a47b05-18ed-41f6-a58b-ca5cb7b3e3fa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f680f45b-7097-4451-897b-d7b7619d145d", "sighting_of_ref": "indicator--272eef38-48d3-4526-99fd-b7409d29f917", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad29f158-1f8a-4411-b6b2-a51215963ecf", "sighting_of_ref": "indicator--bb681479-3fc2-434c-8309-4df21a9de440", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa037a3-0df2-4059-8dd0-072969c28c34", "sighting_of_ref": "indicator--61a11177-0578-472b-ba9a-a705373d04a7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151216b0-1117-4aef-aeb9-560fc5d36f9c", "sighting_of_ref": "indicator--b3b70788-0a68-4ab6-8153-ac72265c72fe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a3ce48-c3e1-4f01-aa8d-17fe9d5c572e", "sighting_of_ref": "indicator--386a63e9-f869-49b6-86e1-f8003d78d8ca", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ec5d52-97fa-434e-96aa-a76741d55dbd", "sighting_of_ref": "indicator--550b75e5-b7b2-4065-997e-16ac7d26b383", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead36a4c-1836-4208-b1e5-a0a7946640c1", "sighting_of_ref": "indicator--21ce982c-707d-4870-8610-9679295d65d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79831a5b-cfe2-4584-8f55-3e00c9fab672", "sighting_of_ref": "indicator--99827115-4925-4002-879a-1eb501c118dc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd731ef-422d-4e76-8cac-49e92761a40e", "sighting_of_ref": "indicator--7cb0dafd-09a5-4b93-b76f-408c055462d0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d3374f-3473-4908-99cb-162b9ef97b9b", "sighting_of_ref": "indicator--7329f9cd-b701-4837-8f2d-71cc0fd0c919", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648a3748-e22a-4098-bb7b-5677c15a08b6", "sighting_of_ref": "indicator--a4b7d436-b548-4e14-8d4c-baef1de2a0bc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7cf9f0e-d4a6-4bcf-a196-4467924a162e", "sighting_of_ref": "indicator--9d1cdc40-55c7-48f9-9f97-55d3e0c90c66", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2873badb-871b-408a-840a-0f9305df4e74", "sighting_of_ref": "indicator--ed32a3f6-710a-4f6a-9271-560b42ab044b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e55d763-d980-4ea6-b713-cdc300b43c8c", "sighting_of_ref": "indicator--d987b0be-afc9-4333-99b8-66be045071ea", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e00cf00-18d5-4bdc-88d8-f8c5bb57315b", "sighting_of_ref": "indicator--34a6e966-850c-4077-893c-27d42447fdc9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc560e5-6834-42b5-878c-0edbf48b0536", "sighting_of_ref": "indicator--c8c23e79-7a03-4b0a-830a-137b0e319a10", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d0df77-ada0-41fd-a671-932903383faf", "sighting_of_ref": "indicator--cb493d61-1ac6-4e1f-81b5-873b5bc9e0dd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6df577-6df3-4871-b86e-720d4f4d3687", "sighting_of_ref": "indicator--1e02ab43-aa89-4e1b-8e70-a402e8a268d4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c14e06-2918-4200-9fd6-0db835cbc5e1", "sighting_of_ref": "indicator--390b81a7-1b32-4656-b905-ee5aad457f9b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2235b504-1c72-4036-8db9-01b6238c28df", "sighting_of_ref": "indicator--13003c66-c09a-4517-8874-ca1ea9ba94da", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46f2663-54a0-4578-92e3-58deb87bf179", "sighting_of_ref": "indicator--11626be9-9cc7-4995-a013-b9dbbcb4347b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9178dc-e475-41db-9b58-6af001159993", "sighting_of_ref": "indicator--effff7db-ba7d-475a-b86b-d54c1020e938", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbb21b0-4a63-456a-8e1c-589055f20add", "sighting_of_ref": "indicator--57938035-58f0-4648-873e-b3f3ee605b19", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7b08cd-3a62-4206-84d3-868b192c3d1e", "sighting_of_ref": "indicator--7ec186a6-7a74-4ab2-a524-0f3fd97255d3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323e3e98-700b-4033-b72e-e94e352adcbe", "sighting_of_ref": "indicator--e74bd53c-4709-4c20-b270-fa6409530221", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a32ed6-444b-4980-b6cc-9f6bf2aad490", "sighting_of_ref": "indicator--47b0bab8-d6c0-49ec-bb3e-9e2d9a10b3e3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bff98c-30e3-4716-9bc8-047e513e93d4", "sighting_of_ref": "indicator--053f87bd-aa8c-4a98-b3f6-f6522c4f6e9b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80376708-dafb-4aa6-b670-e7c1ab7cfa5e", "sighting_of_ref": "indicator--aabb5c7b-0321-4cea-8cad-a8ace08b18a1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2c6f90-e98a-41bf-8a65-4b848f5e14fd", "sighting_of_ref": "indicator--a4d6807b-a418-4093-8ddc-25eaae073d88", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044802df-b81c-4dfb-84c9-7f6bc7a2181e", "sighting_of_ref": "indicator--9ac300f4-dadd-4ef2-a008-9760a7931f34", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440bde14-49ed-4386-9946-c49e54585ad2", "sighting_of_ref": "indicator--67ef53c9-efc0-4465-89ca-3dac62144d92", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c81c2a-1a99-4493-922f-fe3c9e495f4d", "sighting_of_ref": "indicator--cf24a234-3d97-4ac8-b283-e8a1d6c5e8ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d03509f-d85c-4104-b8da-9481dab50797", "sighting_of_ref": "indicator--9d77d04c-e97f-4e9b-8d1b-af6caba43788", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a741cb-a613-43b2-bbdc-2233a1e6fea6", "sighting_of_ref": "indicator--1e34e7c5-4062-4925-a3f1-07b70d2dca46", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2edc195-3be1-4251-ac48-4bfb8eeb1f63", "sighting_of_ref": "indicator--92d39fa4-877d-488a-aeea-5462e6e6c703", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952f7566-aaf8-44f0-9051-32a8b87baac0", "sighting_of_ref": "indicator--f51918d7-4f28-4a2a-b0e7-8d82ca6ef0d4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e7e1aa-64a2-4214-8351-92c1b93cb847", "sighting_of_ref": "indicator--e1a9b13a-1e19-44af-9065-81755290df1f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4577823c-f4ad-4608-aa09-2a10491d7bac", "sighting_of_ref": "indicator--27c65ab4-9a1a-42b2-aaa5-e66213511a02", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf6cb3e-725f-4c23-ab2e-aedc3fd1a999", "sighting_of_ref": "indicator--92d19859-3cf7-45ac-8219-e8c562935f88", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261b9d1f-ad71-4223-be50-7ec196bae14b", "sighting_of_ref": "indicator--0b3dce7b-630b-4e91-abfc-3af6f21143d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfb3b87-c634-4c95-87e4-f0123bcf8149", "sighting_of_ref": "indicator--60a7101e-f569-4706-850f-2a2d6a8d54bb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed965c53-dfaa-4bc4-8832-e720c71bfd9a", "sighting_of_ref": "indicator--920f6290-0b4c-46aa-8f98-a3bdce192a98", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d40eeaf-8d6e-430d-99d4-25785f605f82", "sighting_of_ref": "indicator--8f36ab67-bb2f-4ea5-9dc1-e37d166b2e10", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4835d712-bf76-4391-9c98-4b3fea8caeeb", "sighting_of_ref": "indicator--3282a638-3e7a-42d1-9d7b-2fd3bb8a7545", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724d188a-efd2-4e4a-84f4-71b453f94930", "sighting_of_ref": "indicator--8fa9315c-0db8-4d9f-9961-8a8fd11db128", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b340c44-a540-4f20-a63b-756b21d4262c", "sighting_of_ref": "indicator--53eded09-c88e-4b13-92fd-2f200361912c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b493a31a-0fc3-41f3-8de7-4c6554240e5d", "sighting_of_ref": "indicator--e7902f06-dbbe-4b99-a38c-6ef821957fdb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854422ce-7967-4324-9a31-ab03f9a3697e", "sighting_of_ref": "indicator--657f1029-b478-475a-ad8b-8ca171e2c16a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7bf522-6165-4d49-9399-1b41f95a4701", "sighting_of_ref": "indicator--626528a0-5bf1-41a3-b71f-9d7a07383150", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbe907a-45b6-41b6-8d9c-6abc66d90eb3", "sighting_of_ref": "indicator--0b3473d3-769c-4a91-918c-44ca8639cba3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356a6832-2a5c-4266-a9b5-ac57e1f93161", "sighting_of_ref": "indicator--eef3f11c-c271-4d94-b8ed-0cc45ecf852e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49ff168-058c-4d78-b6e3-2a5ce01c4a5e", "sighting_of_ref": "indicator--2eb4224f-b561-4899-94b0-5d625251c675", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9843491c-3d97-45e2-b9c7-2b050298e910", "sighting_of_ref": "indicator--a3856b56-4362-468a-a669-9d9a6a6ede86", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2df2ae-cf16-4a65-bebc-11e530c5aa3f", "sighting_of_ref": "indicator--08bd00d2-181a-4058-91f7-03f1496114a0", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3934c028-7f9f-49ef-a0bc-f0caa0a922b3", "sighting_of_ref": "indicator--aab76911-006e-4946-822b-3e283d562ff8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065dbae3-6daf-46c1-a0e9-649054802d0c", "sighting_of_ref": "indicator--6b939ed8-72d6-482c-aea9-fedaff2e2731", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69b17ee-c2b9-4592-aeda-9d3af647f643", "sighting_of_ref": "indicator--df6add18-2bb3-48fa-883b-c2edb0ddcfe7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5fa69c-d798-41e0-ae00-492b85fc0524", "sighting_of_ref": "indicator--c7ee318c-257c-43f6-b14f-0a613a6a75ab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3c3c5c-e0af-447e-9a01-21b65765151d", "sighting_of_ref": "indicator--61164f04-ad4d-4d6f-ab7e-194f869b29af", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c768e801-60fa-4665-94e0-fa5de3441b61", "sighting_of_ref": "indicator--314e96ac-8c73-4df3-9170-0022be8dd673", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cebcfa4b-724e-4875-8715-ed0ec276d181", "sighting_of_ref": "indicator--6deff517-797b-4de3-980a-5eeefd37f17c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba4a365-033a-4483-9e72-e59194f2ad38", "sighting_of_ref": "indicator--391ea1b5-8f1c-4b30-a291-2cdaec48ed56", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66dc716-8f94-4fb5-b3ea-849108399d09", "sighting_of_ref": "indicator--19bd5c1a-3e77-4624-913d-47d153ccfa02", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779d6bd3-e4d9-4cef-a204-a0a8128af770", "sighting_of_ref": "indicator--cdd43ce4-9786-41bb-b8d3-2270d7944e69", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f69eb4c-ec19-42f4-841e-86a59bfc144e", "sighting_of_ref": "indicator--6282d2b1-2319-4312-b4db-9a355767e51d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b71800a-8e04-45dc-b3a6-10da741b9386", "sighting_of_ref": "indicator--89cf3954-aad6-4436-a281-cc99e315afdb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68e86f9-f443-4e18-853d-b102dba4e20f", "sighting_of_ref": "indicator--c816b181-98f0-4dd4-8016-3aba3ee293b7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790c7161-a9e3-4ead-a640-cfa86114da92", "sighting_of_ref": "indicator--70f511f5-ceba-4d5c-bf76-278503106f87", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7b842c-d27a-48a6-814f-9e9d99de1fa7", "sighting_of_ref": "indicator--966142c7-e5ed-48fe-90f1-94de5d18f9b5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279b6bde-7743-41ba-98bf-59e075e38e1d", "sighting_of_ref": "indicator--7aef4e02-2a37-4008-92b9-a49b8fc5bc28", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2538f4-f491-4772-8c30-86f1d44cf967", "sighting_of_ref": "indicator--9f0f0754-7348-4e3d-8b86-b8b5a7863ac4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c1f1d3-fd64-47e1-9eeb-2d7954a594da", "sighting_of_ref": "indicator--76e34e5d-e08b-4676-b138-4152880f38df", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978aa0ea-867f-496c-8c71-96753aa03502", "sighting_of_ref": "indicator--d1335850-774e-41cf-a611-cab2415abab7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a76716-7a39-475c-a662-f98a9c7d5d1c", "sighting_of_ref": "indicator--a3b833fc-7191-496a-8ae4-b1ed8d68313d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b057ae1c-3750-43d1-bb40-e05a2a1e0929", "sighting_of_ref": "indicator--ca6351cf-1d92-4234-9fb6-2a9d107ba283", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219c1731-78f5-4408-a15b-04881c548103", "sighting_of_ref": "indicator--149135e1-3b03-420d-8be9-9e163c0cde7a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ee9272-78c2-49bf-b107-54ded3ec2e4a", "sighting_of_ref": "indicator--76b44a53-fd7c-40da-a27b-4a7caf6e3f19", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d319d7ac-98a0-48fc-b843-3f2aae160398", "sighting_of_ref": "indicator--b1dd4139-76b6-481e-b1c2-d71487264b8f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2584cc0b-b33d-415c-a1b4-927cec9cc67d", "sighting_of_ref": "indicator--39e2659e-4437-4e6c-956e-b9deca50ea46", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bff84c-0dc7-4e5d-bcb8-e0f45174b06c", "sighting_of_ref": "indicator--ab6cb006-09eb-4e6b-bd86-63812541d39a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e496da-fe25-42f1-93f7-6cf946c47513", "sighting_of_ref": "indicator--88e35723-f834-4132-b1ef-ccd5cb764bf1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4a05cb-803d-4aa3-ab41-17643670dc4b", "sighting_of_ref": "indicator--f5a0aae1-9a2f-47c1-a480-13d122ff14a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfc22a8-f178-4ec3-806d-471ccdd42889", "sighting_of_ref": "indicator--b7811f2c-5e2b-44a0-81ec-73a0649a0b10", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8981f31-41ab-415f-906a-7e58112df5f0", "sighting_of_ref": "indicator--a99e4424-ece2-4036-ae5e-7f3f1a90d905", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5036fe8-7bce-4c49-b312-3654832a19d8", "sighting_of_ref": "indicator--798ca11f-015c-4077-a65e-3f7ae8f901ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2d8bf2-067d-4612-81ee-3367badc253e", "sighting_of_ref": "indicator--bcfd6cf2-aecb-4fab-86db-b22b8266fe2a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2032c319-41bd-4578-8c5c-18f97bf9e9d6", "sighting_of_ref": "indicator--6bced542-7af8-4700-9488-9776216695f6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3e0a82-f807-4f7d-8f57-2c70cb9dd1c4", "sighting_of_ref": "indicator--430de068-3316-4ae4-be50-d15fc050fac0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21f97fb-4180-461f-ad7b-730333d77938", "sighting_of_ref": "indicator--40f55feb-ece3-4f87-a396-56d119b524c6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4d961b-3118-4373-a791-1da32b3b9733", "sighting_of_ref": "indicator--cd846b1f-104d-473b-805a-7c053614c5dd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54d5d68-ae04-4cc3-b6d3-eb051c5bedc9", "sighting_of_ref": "indicator--380bcb56-04e0-4011-ad9f-05e60c2d829e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5853eba-fe91-4d4f-ba27-d5bc5f384f86", "sighting_of_ref": "indicator--7f038e5f-3634-44a1-8917-6a2639d45a44", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafa48cb-ee80-41d7-80a8-fcaa5366da68", "sighting_of_ref": "indicator--ad8323aa-ca85-4e46-9305-bd6f0fde1664", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b90f30d-2e4e-47c9-a00a-56fe1c3c7301", "sighting_of_ref": "indicator--4669b241-1d36-41f4-a340-f9739d777e1c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5079b2-a3cb-4305-bc4f-c8cbc32f3000", "sighting_of_ref": "indicator--9dd751f0-a335-4cf6-a86f-63b01625cd02", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524b9fac-4cdd-4658-af1a-ea8cd683dbe7", "sighting_of_ref": "indicator--7fed2aff-8141-4bb3-ab9c-cb69b370dc2d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45df83b3-0e44-41eb-ae4d-9b191f22eca8", "sighting_of_ref": "indicator--2e8b7cfb-ba08-474e-90b9-152c3538628d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7e0eaf-a1a1-4830-b325-75eb915b3ddc", "sighting_of_ref": "indicator--f0e668b1-b08e-4896-bb1e-071b1b91ec38", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7849b7eb-96c6-440e-9b4d-15a3c3ea94ae", "sighting_of_ref": "indicator--ff57d698-d79e-4d12-9fbf-02039b5fec11", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735256a8-6500-41cf-8af5-0f0ccca24064", "sighting_of_ref": "indicator--c3b2120f-83c0-48a4-923a-ee7dc6c61729", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ea28d7-e20d-4edf-b6a9-592d9fb54cfa", "sighting_of_ref": "indicator--d8c20094-8dd4-471c-a116-f65da7edb00d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f80868-b7dd-431f-bbd5-9ff9da11279a", "sighting_of_ref": "indicator--6534b621-6fd6-4dbe-bb43-9fea925ad8d3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf97520e-44e3-43c1-8e10-e4ce2e0a323d", "sighting_of_ref": "indicator--0dc7b465-9fdd-4566-a09b-a9fe560fdcdf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e46f346-552a-457c-af65-6fffa95ef55d", "sighting_of_ref": "indicator--ad40475c-ea52-47e6-a513-40920755e2d3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b78986-7f37-4fde-9586-60552e5dbf14", "sighting_of_ref": "indicator--07f267e2-656d-4538-8526-21f2d3e6c084", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0710f09b-39cd-41e4-a82e-053e452f68a4", "sighting_of_ref": "indicator--5913c96d-46f3-4402-8afd-620dad7e24be", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba28a7d-46b8-4ddf-89b1-3483fb3b77b3", "sighting_of_ref": "indicator--795acb28-09d6-4fae-8152-323722bcf78e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bfbca8-b5c1-4a26-b0cf-f12e99698acf", "sighting_of_ref": "indicator--e7ecfdb8-1dd4-48f8-8282-cb75b44b8108", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6538569-0d6b-4db9-8635-536c5ba12f56", "sighting_of_ref": "indicator--276a19f9-8925-4570-b739-030611d8ed17", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323e6f4b-490a-4c1a-828c-35e4ab2a1fa5", "sighting_of_ref": "indicator--b93d86da-ae4d-4c3d-a0e3-73190dcca66c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d509ab-29e0-4e50-95a2-87b36962b0d2", "sighting_of_ref": "indicator--7d4527c4-3a73-4c45-89fc-8a8bcba741bb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9724338c-a15b-4517-86ac-47de17b05280", "sighting_of_ref": "indicator--20a2c3c5-b948-4535-850e-67dc6c8ea15c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc172796-0291-4247-a3b3-6488ccf719f8", "sighting_of_ref": "indicator--75f704a9-6baa-4c50-9277-8ac3d6b7e22f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfc8989-dc28-421e-9e6f-3d528000a267", "sighting_of_ref": "indicator--c584d69b-78c8-48ad-bf8a-e3777f5860b0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43558547-236c-4503-868d-5005480eef4f", "sighting_of_ref": "indicator--4f79f54f-8525-48a0-a8f3-afe35aa47b07", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ef0e12-e244-4da3-9bcb-550da534af69", "sighting_of_ref": "indicator--1c5d76ec-6661-4d05-a44b-91b9ca23a428", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f9f522-212d-41d2-a4b4-93b3b4c57229", "sighting_of_ref": "indicator--6f6e163b-9615-437e-bb69-ef127d3d7367", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc06ce6-71fb-450d-8ce9-f9ffba62e7e5", "sighting_of_ref": "indicator--0affc611-5b6c-4019-886b-f11263db9491", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947ff060-cb8d-4a91-852d-1705b13727ba", "sighting_of_ref": "indicator--aff6ffac-ae76-4a9b-9d33-8bb5d1824d38", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339100f4-2271-41cb-994a-f2796be1ffa7", "sighting_of_ref": "indicator--0de65193-4bf2-4e9c-bd77-b2be6ca7d19a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6dec5ad-2363-4aa5-a625-b7c273a49c6d", "sighting_of_ref": "indicator--8fa2b8d5-f321-464a-91ce-dedce76d9afb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137cc45b-167f-4d28-acbc-0e25aa44c09c", "sighting_of_ref": "indicator--d42f245f-a757-4d8a-b569-65d915599636", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b1b32b-e1f0-4de0-9b11-d73807f82c59", "sighting_of_ref": "indicator--03130b5a-59b9-4352-a8d6-c4cdc2611302", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4964073-e5fc-43e7-ba8d-20ed5a6a1403", "sighting_of_ref": "indicator--91999871-727f-4430-998e-cb6891fabe65", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241b4504-489a-42f2-9ea4-cca13dbfc7b8", "sighting_of_ref": "indicator--6e34b2f1-fb84-4bd5-9768-959573638dda", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e743a138-fcd2-45c5-9502-5f9db951d0be", "sighting_of_ref": "indicator--7636ae27-5140-467b-9118-b42f4bebe606", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775cf384-e209-4138-a23d-66b64504b8ff", "sighting_of_ref": "indicator--6f736225-81b4-4cb7-8120-4f0cd23eeb2c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3295b8f-b830-4a9d-993c-ca1543f39ab5", "sighting_of_ref": "indicator--a73f317f-a460-429f-98e4-14213b4aacd0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309e28ed-55f0-4629-bf7b-7c8a47d1a836", "sighting_of_ref": "indicator--d395d028-03c0-4425-bc99-ca28797a7c01", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff66e1e-afed-4e21-95f0-a189d92cb56c", "sighting_of_ref": "indicator--12264109-649c-4621-9bc3-9597b5b27242", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9eaa354-ac60-43c0-baf9-c2a7bb7edc64", "sighting_of_ref": "indicator--93c48a34-6f97-4cca-945f-e11ad2680984", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d439ac-b86a-45e1-949c-bb2a35b62e40", "sighting_of_ref": "indicator--db4c3ae2-6f7f-4414-82a2-c1447de8b940", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e0b81d-2233-408b-a6e4-251526644e6e", "sighting_of_ref": "indicator--dd025814-513e-437c-96c3-99dbb4b3ed96", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636b8a76-ac23-4f02-9282-b7f14eba14ca", "sighting_of_ref": "indicator--a90ee3a4-7e54-43dc-a43b-bed356b3993b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8b5419-3ecd-471a-ace5-40a6973fdc8b", "sighting_of_ref": "indicator--238b12fe-eec8-494f-bf64-cb9471cfb5b3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af140ab0-18ba-4b9b-ba99-df0e77cb3db3", "sighting_of_ref": "indicator--51dd71c0-a570-4f03-9e20-b13d5c0aa4ce", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e171a4d-25c6-4d84-976b-1c461fd3cf4d", "sighting_of_ref": "indicator--263b48e2-480c-4601-9b37-7b535f4332fc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5d956f-c614-4d55-a4cb-2367ac9f147c", "sighting_of_ref": "indicator--317bef16-556b-458d-b389-80096018650d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426996e4-5d9e-442b-b77d-12902df92b69", "sighting_of_ref": "indicator--0cab3630-76d4-4303-a375-7de2c53c2c08", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4a548d-0a5e-4d54-accf-cf0e3988c398", "sighting_of_ref": "indicator--41c74c77-08eb-437a-915e-c4e1aab6682b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ceaa64-65fb-4070-ad10-9a04cce5155d", "sighting_of_ref": "indicator--8c7e9bc4-cb6a-497b-8bab-91a9f6bf96e5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bdfdab-eb6c-42c8-a4b0-c2c24386ceb1", "sighting_of_ref": "indicator--620a6995-877a-457c-8104-f0d120b56323", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8b10e2-c039-4ff5-a283-4e4584bddd06", "sighting_of_ref": "indicator--fd9115c5-28f2-47e8-83c5-3432ee16ffb6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bb03d9-2c8f-4f8b-82b4-57206528f895", "sighting_of_ref": "indicator--e3c96c70-de34-4a82-9d59-e4d94d6a8bc9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28fbefb-6d53-4499-8b49-d3de691100b7", "sighting_of_ref": "indicator--b84152da-bd6e-419a-91a5-277fb6a09dc1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301639fc-7d1d-4d54-ba7a-d51b7c435cf2", "sighting_of_ref": "indicator--67e8852c-b465-40fc-904b-42e7a17a0199", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67a6f37-33f0-4240-a869-708ad1f625de", "sighting_of_ref": "indicator--b1dd173f-95cb-4a19-ba42-28e78337a3ac", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37cb1e67-b143-4294-b653-73418117f18e", "sighting_of_ref": "indicator--4815978d-c73a-4514-a409-50f3084bb46f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4312925-275d-48e7-a8b1-27a6e0842ed4", "sighting_of_ref": "indicator--b288ed33-c941-4534-bb54-c593fa55d4c6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fa0e56-0d05-4fb2-aefe-b9691a2408f5", "sighting_of_ref": "indicator--f613d84a-4fe0-4ede-86e0-c264f368cf28", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4442dde5-03bd-4c10-836b-37f4f1c6aac8", "sighting_of_ref": "indicator--c0ffa374-b025-4122-8ba5-82d64bc7839f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c37c6e-0ab0-417b-bd74-16e6902aa318", "sighting_of_ref": "indicator--0bbbe5a9-c3a5-44d1-902a-65bf4810b9fd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb1ddf8-a251-48d7-93b8-e6e7bee02e8e", "sighting_of_ref": "indicator--8eeb03c1-7ab2-4c77-be24-de2c74d50d32", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f5235af-542b-459d-9bce-fd4b3a9b5b1d", "sighting_of_ref": "indicator--f3a292b1-308c-46bf-9445-5e5968fdd7cd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2939e644-c7b4-4313-8a3c-057932deb404", "sighting_of_ref": "indicator--5573a327-ac35-4762-8c02-855cbe75110c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055265e0-1ae8-46d7-8cb7-f86de3d4b916", "sighting_of_ref": "indicator--bff9b89a-a2e7-4130-97ca-0b5ec9f93657", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2edfc556-007f-45e4-99c8-f5c503922858", "sighting_of_ref": "indicator--c3b65cc5-553e-47ae-b4ba-f64c9dcc7f6f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a02410-b008-4e11-9167-035ff43eb773", "sighting_of_ref": "indicator--1ad21e5e-3c66-4724-b039-f56364879a96", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe362fe1-9c35-4cb3-ab8c-f2f09efa8534", "sighting_of_ref": "indicator--1ad21e5e-3c66-4724-b039-f56364879a96", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0264df4a-e01b-4096-8197-b76e96787cab", "sighting_of_ref": "indicator--2e5fb907-7fe7-43dd-b3c7-19f4748f9734", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52a7bf6-5973-4901-8909-689e80faddb9", "sighting_of_ref": "indicator--f6222e0f-5a8d-41fc-a252-bd072f4a30ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b162ea03-74fb-44e9-9477-ee6350019262", "sighting_of_ref": "indicator--01cb536f-cc68-45a2-ae2e-0375239a97bc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7aa8818-ff29-485b-bf25-e113f74517b6", "sighting_of_ref": "indicator--7cc9eef7-fcdd-46be-8416-3fdf5f1ecc21", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7527841e-4dba-4b82-976f-7d975e5076f0", "sighting_of_ref": "indicator--9bb55553-21b5-445c-be87-85a989ec56c7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e5024b-a72a-49f6-ae1c-2e169ab80c6c", "sighting_of_ref": "indicator--4acd11ed-1f1a-47f2-aa16-b7ab9b00ce68", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5d9c62-5dcc-4a20-92be-b82b92cfb71c", "sighting_of_ref": "indicator--718ff6d2-c2d4-4f28-b13c-2d1451a24a45", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928d2922-8e32-4360-83f0-7e75473c636e", "sighting_of_ref": "indicator--a2226f3c-a496-417a-9812-1c2562eb8d40", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11540bcd-4d79-48bc-a5c0-9a9cf664de3f", "sighting_of_ref": "indicator--7665e239-1a1c-4644-b77a-846ed9842571", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e73592d-e0e9-4bdc-b815-30348bf3ae1c", "sighting_of_ref": "indicator--03c1d3b1-6fba-466c-95ea-bb508a27afd2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9613f56d-efad-4276-b3bc-440cf5f9a4c7", "sighting_of_ref": "indicator--c370463d-5830-4f5a-8874-15bf98dd7b0a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd60dd2-dc10-4cc0-9dbf-b66e58531b5c", "sighting_of_ref": "indicator--52d97ea4-b0d2-47df-a0ae-f7798bbc4408", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b5da06-6035-4113-9774-dc1fe51de348", "sighting_of_ref": "indicator--afdff287-f41d-4f59-ae4e-9d74ea5255f9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21798496-621f-4c17-80e7-405d2aa59ff0", "sighting_of_ref": "indicator--389fa4a7-4ff7-47ff-83f9-583ff396598d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75b57d1-3703-4832-9afe-3f3124812aba", "sighting_of_ref": "indicator--d0bc9186-84c7-41a6-a19e-21f440357fd6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afe82e4-d91d-4317-98c9-01f4b286db53", "sighting_of_ref": "indicator--1507a536-9108-43d6-b04f-9c251d0ffcd8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2194e94-d0b0-4105-9a67-96a2f478cd2b", "sighting_of_ref": "indicator--11eace00-bd5b-46b9-b1c0-ffa2f2046810", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b0c1d5-434f-49f4-9b99-d23655ea285b", "sighting_of_ref": "indicator--b2c637d5-8a79-4221-a937-3f790c3db6d5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71af09d1-9242-43f6-ba66-1ece3a6a06da", "sighting_of_ref": "indicator--c779913f-0a7a-4e90-a905-101e154fcb02", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d24a3dd-a661-4e77-9690-8231308a309a", "sighting_of_ref": "indicator--4ffc1072-f1bc-46fa-854d-7f994a805fa9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fc7352-b2c5-4311-8f25-8741325ae979", "sighting_of_ref": "indicator--88ffb065-25a4-47cb-9d3f-bc7a3fa5fb93", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b614cc-90fa-4135-bb6a-86ef67d61f5a", "sighting_of_ref": "indicator--82b40305-852e-4abd-82a9-978caa58bcb7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc087df-5afc-4f4d-9b18-a97d282cb772", "sighting_of_ref": "indicator--1d2a4e54-5822-4951-a252-3fdab47ad462", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028088cf-6a69-4fd8-99e1-f1329db73edd", "sighting_of_ref": "indicator--9c41ea9c-081b-43fa-b906-bca490119045", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7a0f22-dedc-4302-b2ad-5c3c93fbbaed", "sighting_of_ref": "indicator--61839a62-0a63-4e7a-94d8-4d8e0841faea", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94d952d-3fcc-4eb3-a064-73a9268bfb17", "sighting_of_ref": "indicator--6a298461-bd63-4b6b-8ad8-33a865c5753a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f22037-917e-457f-9413-15d40b649a12", "sighting_of_ref": "indicator--ca0d13c2-e994-495f-a098-435c2f75808b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c901269e-16c2-402e-8dda-d5f86dec2642", "sighting_of_ref": "indicator--42762cc8-e4f9-467b-895b-c251b89df94a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe1db54-5b3b-4056-bb66-93f7d8da9472", "sighting_of_ref": "indicator--4fc370ae-6b55-4610-a77d-bdbf457d1d64", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f076f8-64a7-4b52-90b7-41a6635fae7c", "sighting_of_ref": "indicator--821bf446-6f8b-4ccc-ad37-1da9e251f1fc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9420035c-4c0e-47fe-acc1-ce51f9aa10dd", "sighting_of_ref": "indicator--fcb9f089-c9dd-4bd2-95d2-3134815e67d9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01420da6-f25d-47ce-b060-ac471b88c8c7", "sighting_of_ref": "indicator--41210b88-b7b3-4fe3-9a29-4e3073a6057b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d511098-6dce-4ef0-8e02-038ce47a9260", "sighting_of_ref": "indicator--e3ccea86-de2d-445c-ab8a-70ea1d9e088f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af904e2-4298-4e2b-9c74-6cfc6f45ad94", "sighting_of_ref": "indicator--3798eaa7-3a17-4402-a89f-243fb3b04a1c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983d83d6-8444-428d-918c-4f2e5a5deacc", "sighting_of_ref": "indicator--3d356212-a16d-488f-b2a4-febad2093cd2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11983bd9-1c2c-44d0-81a0-60efce4e0a6d", "sighting_of_ref": "indicator--19835d2d-e6e0-40ec-8d4b-9af6fe190872", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097b7e91-1cba-48f7-b150-51da7fe5e4f0", "sighting_of_ref": "indicator--dab78343-4ced-4389-ad61-f8faedce1580", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e0d876-9878-41bc-9184-4cae239d9ad4", "sighting_of_ref": "indicator--c41881c3-7c17-4951-a500-b9b3307b8fed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca476050-a96a-4652-9bf4-e72b69a31d0d", "sighting_of_ref": "indicator--897c21c3-7cf4-4083-afa3-7da202d06a70", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46d639a-1321-4ee2-885c-7041e822c551", "sighting_of_ref": "indicator--b4a772f6-6eca-4a56-9ae1-aaab13699f34", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708cb7f8-c19b-4f62-9f6b-c83fe749173b", "sighting_of_ref": "indicator--18426f91-7f79-4a48-84c2-71761fe321ce", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0890b7-580d-4b22-848b-e83d17c908c8", "sighting_of_ref": "indicator--b97475b8-56ef-4feb-8fc0-fb0907d8e1ac", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e92356-77ec-44b8-8d7f-7329a9cc0bb4", "sighting_of_ref": "indicator--2698deec-6112-490c-84d1-6e1b7e61c252", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7efe0d9-69e9-4114-88b6-d5ba65737397", "sighting_of_ref": "indicator--1e15a247-a11e-4000-afdb-d8df647ff651", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f7b65a-72f7-4d96-bb02-9b3ecea8845e", "sighting_of_ref": "indicator--2899c781-9ee0-4bd7-ade9-d1ba41bb7962", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec3f20f-628f-4736-a1e5-291442e3ced0", "sighting_of_ref": "indicator--e6319aab-4314-4005-b38e-e906d76f4a79", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8d98c9-9f36-438a-89ef-771a7a81e86f", "sighting_of_ref": "indicator--5a07e476-08d5-4543-8e2c-f037f9bb52e0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21697e4-30fc-48c9-ac32-d367de39ba18", "sighting_of_ref": "indicator--1bc667e0-5da2-44a6-adbe-2202d8584e17", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c76bda-eb3e-4551-a230-bde9cd358235", "sighting_of_ref": "indicator--27d70467-1156-4463-8020-301a694979c9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3d79ff-fb49-4bb8-a987-40ef0ab78346", "sighting_of_ref": "indicator--9431c0f3-3875-47fe-9987-232e4514500d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176d1208-369f-4b74-9839-16cc7d0b71be", "sighting_of_ref": "indicator--0ae0b87f-0a1d-47ba-b262-5dce7f531b5f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53a1488-2ba2-4982-ae13-fbd95c7dd065", "sighting_of_ref": "indicator--f89c38f8-68d1-465d-b21c-4af26d186e74", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c211220-9d78-4c94-8e02-3ef259dd1fbf", "sighting_of_ref": "indicator--19c054d9-a047-49b1-bdd3-1e62e8a95293", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fe1b5b-df3a-478d-a79a-44697286c433", "sighting_of_ref": "indicator--71de403f-edb5-4893-b2ba-57f02ecda141", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5653f3e-f3d4-49b8-8ec1-04139f246c05", "sighting_of_ref": "indicator--5ccb560e-67cf-4f5b-9301-8421d774d5d8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc014430-7c8c-4b61-9eb5-909a31828596", "sighting_of_ref": "indicator--5ae5b083-ea81-4d90-8efb-5b039dc2fe5f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec2e075-379d-49fb-91dc-2152b87db225", "sighting_of_ref": "indicator--d7e3a6f8-064e-493d-a7d3-dab9eb626e9d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312e001b-677d-4371-b7bc-bc1db83d31e3", "sighting_of_ref": "indicator--7955c429-8cd7-4fee-b940-a84937348419", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2453909-0424-4929-8f53-193daceff78e", "sighting_of_ref": "indicator--7be8ccd9-8904-459e-81df-f7a32baa401f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72dc9187-9aea-4488-b63a-95399057ff27", "sighting_of_ref": "indicator--27550417-edcc-47b1-b0b0-8b558419e63b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b445bf-32c3-4bff-a048-db57bd93091f", "sighting_of_ref": "indicator--538b3159-39e6-4274-863f-7063175b354c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45dc0b3f-7bc6-4511-a0e0-51352ae1b612", "sighting_of_ref": "indicator--41b926b5-0a5b-483d-b384-1769db8b87cb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b83b11-331f-4184-907f-3dd357a515a1", "sighting_of_ref": "indicator--3bea477d-a93e-46d8-bd7c-1699ad0663d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68503e3a-9da6-4335-9539-fd25ebf82037", "sighting_of_ref": "indicator--bdb19c7a-d088-4154-9f96-9b43cae74484", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f0b124-8bf3-4b26-9755-e1a756bb55a9", "sighting_of_ref": "indicator--8696100c-547c-4c03-bafe-05af4c8be3af", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea411bf-4af3-43e8-bf9a-28c467f9490a", "sighting_of_ref": "indicator--9577fece-5aea-4c92-a0b9-f4e7342ceca8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0a6c84-fa82-4e63-9318-d9d7a3b79790", "sighting_of_ref": "indicator--1c78a996-d2d8-48b3-be9f-9f8630a649e9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1620724a-f644-4e5e-a302-d69731b19990", "sighting_of_ref": "indicator--03156b31-cb8f-4709-87fe-9111ee257f68", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cd5801-44a5-4168-8c89-249990b5782a", "sighting_of_ref": "indicator--9ac865f3-73b9-4b37-ac98-f9b29ecf07b3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec5a92f-3b9d-4997-8a2b-1f0012ebf807", "sighting_of_ref": "indicator--f341edda-b14c-4534-9527-53e55446a020", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8d7105-a1cf-40e9-81a7-333e1ff60775", "sighting_of_ref": "indicator--ba333b56-8a8b-4eac-8ca4-c95a049e7910", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f723cc14-8b82-4144-afcd-890bea22f8ce", "sighting_of_ref": "indicator--e0e562b7-ae9a-4794-9795-41fcf9d24f67", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fe425e-ba30-4177-aa1a-efcf3796d10c", "sighting_of_ref": "indicator--c3a4fa0d-d96a-497f-81df-0b39079beae9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5dedd1-b556-467c-bbb7-43b8d5c50f47", "sighting_of_ref": "indicator--e721b62d-17bd-46cc-9cbe-e17f9ddca0c7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279b1543-7b7d-433f-89a5-a09a70406c89", "sighting_of_ref": "indicator--60cc4322-eb87-480e-b1ef-ea73a35fdfe0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda298bb-edda-4cd7-b04b-5130d7c29fd7", "sighting_of_ref": "indicator--0ea28b1f-f09a-459e-8ac1-0e3bc8ffbf61", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af9ca46-6b9d-40a4-a265-0f5ffb21e7d7", "sighting_of_ref": "indicator--4b5764a7-99a7-417a-ad9d-70e52e588cac", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b89d88c-f86b-4868-90a7-eda85ff88f79", "sighting_of_ref": "indicator--59e1cd8d-f7e2-46de-b144-ab8cd32843ca", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad764bf-f74d-4dc3-8104-41e897dc0ee1", "sighting_of_ref": "indicator--71db76ef-a04e-4174-b096-66cba6333254", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47fabb20-171e-41f8-ae90-faa8ede0cb70", "sighting_of_ref": "indicator--dc1dd5aa-ef9c-4f24-91dd-21c8a3ebcb30", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463850e6-4a9f-4dbf-9faf-da9f72f214b1", "sighting_of_ref": "indicator--e31a4392-fb5f-4adb-8a06-6418b1cee6a9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efa4083-b80a-432e-927a-19783bb71575", "sighting_of_ref": "indicator--86a156b2-d0f2-4d0c-880a-b750a3b11085", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb08394-abfb-4f3a-99f4-6d0ac29df5e1", "sighting_of_ref": "indicator--88ca57b3-fd3b-41a3-b0d8-9931f2b04aee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0707dd37-f0cb-4e91-92dd-3baa72e209cf", "sighting_of_ref": "indicator--66436832-a2b9-47a4-9782-b8d94dde2b7f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7eb5bfc-5a94-465a-a733-c013bdd86667", "sighting_of_ref": "indicator--58ffdcf7-49af-4a33-8f86-a42723dc1ade", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce5409e-479b-414a-af60-b8a9f602c1ff", "sighting_of_ref": "indicator--aaa5107d-cd17-4d95-9444-091cc2f75567", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f8c45b-1cac-4ed1-8b0c-183d949655ba", "sighting_of_ref": "indicator--4fd45c24-43e1-4e0f-894f-37c1ca68889f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc4d2ff-5cc8-4518-87eb-7eba80bf8489", "sighting_of_ref": "indicator--7b71d059-28ee-45af-82ce-d5848c069f29", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd91a144-84c8-41bb-a312-23bb9672c15a", "sighting_of_ref": "indicator--708a2beb-5de3-4f18-985f-012413c9e0bc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d36010-389f-43fc-97f2-38a8c0f14086", "sighting_of_ref": "indicator--fbaab5ee-f7c5-45d0-97c6-ae935779dffa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb120ece-ffd1-4ec1-8873-fc233bb39511", "sighting_of_ref": "indicator--15e56fc0-b715-4970-85ca-9a8641054e11", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbff19dc-4cca-4497-8456-a1f885801bae", "sighting_of_ref": "indicator--7934bdc3-8e94-41bd-ae40-8b2257f76d6b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6ce2ad-d6a6-4595-9cfb-73b4ce959776", "sighting_of_ref": "indicator--d34fde51-0288-477f-b5fc-ba3649659c60", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73885d68-4a93-4c80-832f-a69dd2ff1fe7", "sighting_of_ref": "indicator--623cc92b-df0a-462c-95b1-42a6e06cfa73", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12171a5-c818-41ca-9f34-5888de5bb019", "sighting_of_ref": "indicator--78055e5a-5e27-42d4-af15-6540a798f5c0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676c2105-f247-4e07-9920-9a2c6aa0a778", "sighting_of_ref": "indicator--a0ecf622-04fb-44bf-891b-abec62ca7f00", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e50fc2-b56b-466f-8a6e-af4b10105302", "sighting_of_ref": "indicator--48021a9c-6819-4a5e-a11d-bf494a475712", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f573aa3b-9073-4323-9bb6-900049341c55", "sighting_of_ref": "indicator--52b3d25e-6baf-47f4-8868-30317bb4a052", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d95d03-0355-4d83-91de-5a78a71ac038", "sighting_of_ref": "indicator--bdf2b0ac-b92e-483b-868f-c18b62e4faa5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4cf17d-7bbe-4878-be43-851a7a3c678a", "sighting_of_ref": "indicator--85637729-bf94-46e5-9137-291e872b7672", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d7697e-943f-48ed-9e6a-41ea08b66d4c", "sighting_of_ref": "indicator--39c86d90-b52f-4f74-8da9-e1d24c46961e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44d9bbe-7ddb-41bd-a17a-06dd3c135c86", "sighting_of_ref": "indicator--39c86d90-b52f-4f74-8da9-e1d24c46961e", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7743c7a0-58c5-4cdb-80a6-078da5473350", "sighting_of_ref": "indicator--39c86d90-b52f-4f74-8da9-e1d24c46961e", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e132b63-82bf-43cc-8009-33c94e8a3516", "sighting_of_ref": "indicator--e0da3c8a-535b-4dc0-b5df-1b10e1c0f664", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e751b613-14db-4121-8e68-17f62a789cf0", "sighting_of_ref": "indicator--e6fd4b08-5b72-43f7-9533-62542d590c81", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e324bd8-d052-4b34-b81c-ab6a66de94cb", "sighting_of_ref": "indicator--d27d7573-c862-4689-8d8a-a1824158d9e7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2e3db0-d156-4418-9f32-8e2150b1251a", "sighting_of_ref": "indicator--332bce73-7981-402a-84c6-baf6fb601eb2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41e44d1-e81f-46dc-843b-180db0ad0215", "sighting_of_ref": "indicator--a8808a7e-1e71-4d8b-a949-0c47690d6294", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65745e8-cec9-4474-82e7-79ab04765d7a", "sighting_of_ref": "indicator--374271fd-1697-4813-9138-33d98d1487c0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c37c79-16e7-4dcb-be0d-2917d5a5e618", "sighting_of_ref": "indicator--9a199329-9325-4f59-aaaa-0487d5f37e8e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71db7e9-70e4-4e42-8bb3-7691b6010ea8", "sighting_of_ref": "indicator--db9fdacc-7db5-4356-a883-b5f3e2d25b7a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f6eb89-019b-47fa-8dde-ea80949d5d19", "sighting_of_ref": "indicator--241b7662-0e39-4ab6-9825-b277c9e631c6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71de07de-9b6b-4371-a150-d68f44c5e2a7", "sighting_of_ref": "indicator--b7997357-825d-44de-8bd7-86763b39e3a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3def51eb-1d78-4334-8acf-8bed07c89335", "sighting_of_ref": "indicator--7704128d-c298-4287-8992-293e1d25ee5a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f0b8a4-230e-4b67-92e4-376fbc13a8be", "sighting_of_ref": "indicator--84ae757f-1ab6-4cc1-8114-75d871916be5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74bf0e89-10b3-43a4-afd4-448c74b45b4b", "sighting_of_ref": "indicator--b3c01015-0718-4102-b417-94504990801b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb902033-0d88-4d19-9d95-ee678a8fa180", "sighting_of_ref": "indicator--e635102f-2db2-4a62-8c41-28016de96efa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffae233-702d-4d48-9bb5-f676e570ab20", "sighting_of_ref": "indicator--ce350ea3-a618-42ad-ad52-01653bade662", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e02cbd4-8be6-4c84-b607-f4e4e1e186ad", "sighting_of_ref": "indicator--6406d65c-4f97-4434-951b-affdbf3ebe0c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f7e151-747c-4894-baad-1e30ac6d7a95", "sighting_of_ref": "indicator--aaf55a12-8948-459a-96ca-3e40aa9a3ce3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f33cd2a-5147-45eb-888c-2769a6716419", "sighting_of_ref": "indicator--4d7443b8-c720-4f63-bff7-28a4f237a18b", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c235f58-b1ab-4f8a-995a-857b7a3c23cb", "sighting_of_ref": "indicator--68f3d0f5-13ca-4f04-a252-d6dd80760741", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5264468-f8c1-40b0-ac50-cb4ed643d5ea", "sighting_of_ref": "indicator--b579279a-040b-4222-b26d-a3fea95cbd28", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e459be-ee0f-4fe5-8738-0b548b939a72", "sighting_of_ref": "indicator--30d9be6b-369d-4e86-b481-7b6e2578c116", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a5a582-42bb-4c4c-8ad4-8f703efc0e61", "sighting_of_ref": "indicator--473d7cd0-fa95-4531-aa4c-8487dfd5c08a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a29e34d-9c2b-482f-9e50-2a93044a82a3", "sighting_of_ref": "indicator--0172d28b-689c-4641-bfa1-79be85f24f0c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4091e615-7fbd-48e9-ab81-6d1490645c54", "sighting_of_ref": "indicator--71362d72-a2bf-4b99-92d4-934c7ac40413", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c365c6ed-120d-4724-a109-694ca8f76b13", "sighting_of_ref": "indicator--afd879cc-5e97-447c-ac41-2a6d3cc5ac7c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12943dd0-21dd-42ca-bff6-b827ce98c727", "sighting_of_ref": "indicator--0940247c-b230-4c25-bb43-94f209126040", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7b4b8d-3a95-49f7-a7a8-7c15e0a1db2e", "sighting_of_ref": "indicator--6c133253-0617-48ee-8b0f-b214b099cdd0", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494c1c9b-d618-4ed7-ad55-bcb817ff11dd", "sighting_of_ref": "indicator--40def4c7-76c4-4b6c-805f-397f8e7dacdc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89dcd22-b5eb-4f42-a99a-77de15fe2c2e", "sighting_of_ref": "indicator--e2560cac-f564-4b1b-af96-117f938cae1b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e78ec8c-da6e-4fcd-954b-c32081c5a8e2", "sighting_of_ref": "indicator--2cc90704-c440-470a-b6fe-f45dc4485d9b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c87586-e013-4fbb-939a-1eb20713041f", "sighting_of_ref": "indicator--c545a8f6-b93d-4025-99bf-19cb6716537d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd0b9c8-4aa9-4ce9-bafc-fa87c02434a1", "sighting_of_ref": "indicator--d89846b3-6013-4ad7-8c99-afd5b02091bc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ffc08c-4a34-4819-ac70-29c285ccf716", "sighting_of_ref": "indicator--02fa5a76-5f48-4232-84fb-5c0ffcbb4dbe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f145850e-a3cf-4047-a509-4e19b19bbbeb", "sighting_of_ref": "indicator--288f78be-9e0b-4e5e-a22c-d6b471bf2f3b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5172165-7c82-4596-a6bf-b4a43078a77c", "sighting_of_ref": "indicator--a8e21138-0097-4787-8bc2-0356e80aab12", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda2b7d4-03f0-48d0-8987-e5ae0f4744c5", "sighting_of_ref": "indicator--a5a6fa78-3a21-4f65-8ea4-bdfc747b3a88", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177c35da-7dce-43e4-9dae-5b17b71cb1b9", "sighting_of_ref": "indicator--b18263c8-0659-4a1b-a319-a1d59126c446", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4acea2-c3eb-4f84-bb1e-26fba3a0420c", "sighting_of_ref": "indicator--58056498-d464-4270-b23f-a7fb80523707", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0ffbde-9407-461f-bde7-43abeacf4caf", "sighting_of_ref": "indicator--8437a450-5e87-4576-b1a2-eab40175bd03", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8612872c-e16d-4471-8b24-9b62810a4717", "sighting_of_ref": "indicator--b11b4f11-f9a8-4b5d-a23c-fcb9aca64474", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645ccd83-6179-42aa-8c6c-9d4c4c7e0c69", "sighting_of_ref": "indicator--f96e4f18-3f5c-4def-a672-db16646b0834", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b970373-6588-413d-9c88-ce1367238182", "sighting_of_ref": "indicator--3835fc3e-12d2-4864-b2c5-0a295ace50e1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1601223b-2980-471a-817b-bf1005a1d0d4", "sighting_of_ref": "indicator--459b78ac-3203-4f03-b8ac-85b19f26f0a2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d67d675-1680-4878-bf33-0837c641774b", "sighting_of_ref": "indicator--3b90adf2-92cf-4376-b5af-3057c101a425", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8d9140-5242-447d-b2ce-a930851fab61", "sighting_of_ref": "indicator--1997e658-1ea9-45c0-862c-40e9e461a915", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d33da8-0917-4c6c-a3da-225daba8362b", "sighting_of_ref": "indicator--1997e658-1ea9-45c0-862c-40e9e461a915", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1fbe05-051e-43e0-bae2-77b66e49fd98", "sighting_of_ref": "indicator--1997e658-1ea9-45c0-862c-40e9e461a915", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc49ecf0-c357-46d8-aa22-cef48fc2d4bd", "sighting_of_ref": "indicator--6dacecea-e0be-48ce-99dc-5b20294edfd0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9b6b30-892b-4ceb-a8ed-9362c90e1703", "sighting_of_ref": "indicator--df65bf7a-eb50-4f41-abd1-2e1c612ae9e0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762d79cc-4f49-459e-a721-6c0659478d40", "sighting_of_ref": "indicator--4f9b0bf5-685a-41fe-a3bc-ebc718a2688e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0ddf11-4bf3-41b9-ab08-4b43bde7ea96", "sighting_of_ref": "indicator--0a9006d9-a6bc-4b28-9b3c-be1488332262", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838cfc8a-468f-4fc9-8636-8278d27a990d", "sighting_of_ref": "indicator--c04f9e75-fa11-4cc6-9dd8-e080ea70d8cd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7283388-c2f0-4de4-af56-4efaf1afb72f", "sighting_of_ref": "indicator--ad766d6f-6e54-4f84-94f4-c6f82d971164", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9358dd-7b1c-4160-b7f6-822a0cceb6cf", "sighting_of_ref": "indicator--efb1c290-217a-4718-9de4-c83072e1606d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5b570e-badf-4228-837a-8587186a0651", "sighting_of_ref": "indicator--5b761e88-47cb-4878-ac2d-e3a7538cb1d8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a91c86-d198-4e09-bc82-065efb39f28a", "sighting_of_ref": "indicator--bc0ca394-506b-4fc1-9cc7-e4d5799cc7d3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ccd7a2-4562-4133-a46e-0201a14ddcc3", "sighting_of_ref": "indicator--f1a6a850-e15e-473b-8acb-fc6f443dd57a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050b8127-8f93-4a13-810c-8eae1c57db71", "sighting_of_ref": "indicator--2829035f-01aa-4c3f-9ba6-8004b78a2001", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ba4dbe-4e2a-4e1f-8b1b-e2fc0432d706", "sighting_of_ref": "indicator--508723a7-b599-4cb5-86f0-55bfd8158033", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf7f0a5-aa82-4e8a-a9db-77ccbe3b990a", "sighting_of_ref": "indicator--8c42db7d-7e77-426b-934f-718656dee96c", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca80ac0-b13a-45da-b4e2-52aca05f1e41", "sighting_of_ref": "indicator--b12fc48d-ca15-4c16-ad8f-91049733b910", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1245f0-fca8-462d-bcb1-2163d54bd96b", "sighting_of_ref": "indicator--efbdc953-15d9-44d7-bc6d-8f459988670f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ac4277-dd65-4ca4-a54d-1b9f5bda45ea", "sighting_of_ref": "indicator--13922580-6d42-4cd8-98ab-a64c756c475a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f29f42-ff05-4cb2-99a8-e9175de67059", "sighting_of_ref": "indicator--63efdec3-0ed7-41b6-89ac-5572ce624ad1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4914fff0-4f1a-4ec0-92b2-7c98beea14be", "sighting_of_ref": "indicator--a3f48957-7f3e-4aed-ae6b-63dbcbfe1d47", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a4b160-1341-4c37-b783-963740e1233b", "sighting_of_ref": "indicator--dd769056-5f03-49e6-83ee-f0f9b621b52a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47efe30-cbfe-4fd5-a9e3-7da3d62e4c73", "sighting_of_ref": "indicator--a8d9598e-e58b-48e8-a7a7-7c19eca27e0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a49b43-b718-4e9c-a889-7661a51613ee", "sighting_of_ref": "indicator--1ffb4101-81a9-411d-9c29-923052e590fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9cce18-2930-4839-a361-05620256f8be", "sighting_of_ref": "indicator--a338747c-22b3-41c5-86c9-d6e6987724f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889fa2dd-ba7c-439e-af55-0174864c19c1", "sighting_of_ref": "indicator--42f6913a-0b06-494d-8b36-e594a7b1f39d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1913e4b-5ef1-4a75-8da0-b6441f8b37bb", "sighting_of_ref": "indicator--3d5dc7ed-ed5e-47b5-9b10-2de5ff1cfc24", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87025070-a516-4618-995c-3510bd73138a", "sighting_of_ref": "indicator--bb45d084-366e-4543-abcf-657305e0913f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1b79b7-d531-46e4-a81a-6f3ed9b34104", "sighting_of_ref": "indicator--8d1b87dc-c091-47ac-ac98-9b46e21c2800", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514e75ae-b7de-4a66-a28b-13b62dd736eb", "sighting_of_ref": "indicator--ec78f66b-6456-46a6-aa73-26062a3ca5d7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d146327-02c7-45f4-a299-26aea3372a8c", "sighting_of_ref": "indicator--10fdac48-548a-4357-b059-a5c7b51a339c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc30c03-5b81-48cc-a5d2-e08364c16d68", "sighting_of_ref": "indicator--5502e851-6384-4c23-bb63-c6d97d227cfb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fccfe6-6d74-400a-8d5f-f555eeffa9e4", "sighting_of_ref": "indicator--c4f39b2d-947c-4402-b50b-cf0655ba54f8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f32066a-6775-4ee8-99a4-9250ce0b68de", "sighting_of_ref": "indicator--d41ddc8e-b4a2-4f21-bd0a-1a45a5ce7b86", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb668b7-ecca-4546-be45-48b83d9279e7", "sighting_of_ref": "indicator--03f4f9e1-79e5-4c8a-b174-4912ce3f6fc5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97528043-a9b8-46c1-bc88-048fea7aec56", "sighting_of_ref": "indicator--c1600958-ea57-45b2-bb00-85ec567d0174", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfe5a33-b59a-4a8f-916a-39c9e6284a42", "sighting_of_ref": "indicator--8b5cbced-c0f6-4206-855c-5b5e179fb331", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2fab5f-5f59-4999-8c15-141cae625824", "sighting_of_ref": "indicator--1d522b3a-06f9-42d3-8177-e0bca4b38f3a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3deb230c-a8a1-44c8-b204-31fd34201e9f", "sighting_of_ref": "indicator--ebc3eee4-b56e-41fc-af87-6920e535ee10", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc50d9ac-74e6-4884-8cb3-8cd4c17fe4e1", "sighting_of_ref": "indicator--d5a34f3d-9279-4668-bcf0-37f30c578e3c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d656768-f986-414f-bce0-48c3201caa75", "sighting_of_ref": "indicator--ba2784a6-8751-4504-8acd-854ee9a9b3f7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace6f710-821d-4f55-bc93-4265bda00505", "sighting_of_ref": "indicator--ee1def04-336e-44b7-a2ed-3935cec45628", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bdde417-311e-4083-8b3a-d202aaadc735", "sighting_of_ref": "indicator--2a9acc4a-d2bd-4658-a39b-7f659d762945", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c5adfd-7c55-4112-92e8-73126842ace1", "sighting_of_ref": "indicator--2a9acc4a-d2bd-4658-a39b-7f659d762945", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ec1384-1578-46f8-ad99-1ea4e8f8043b", "sighting_of_ref": "indicator--b52ef087-2ea2-4020-9562-47c400abbb9c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbac106-b406-4fa5-8104-88c25bcce5c7", "sighting_of_ref": "indicator--2565e708-5f75-42d7-a6d4-a7724c2f273e", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21670e1e-ee69-4555-abe8-e06a3d28deea", "sighting_of_ref": "indicator--3f3284fe-d7d7-4a3c-b8dc-865b107d09b5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6d7a2a-2660-4ef9-8c4e-2e3a7679078b", "sighting_of_ref": "indicator--a19ad327-2cda-4bbc-b793-0c8226356fdd", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d96882-7f3f-4696-952e-e11ec42539ba", "sighting_of_ref": "indicator--999cca5f-ec96-4722-b76a-f257402bb9e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e984259c-ab98-4181-af58-9f1d127ce875", "sighting_of_ref": "indicator--d8d95011-ce41-48ab-bc8f-c3ace6a79d00", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd21c250-ec27-4d29-8b92-0938a7e09227", "sighting_of_ref": "indicator--3201f079-ead1-457c-85ca-6ce9c1cbd3f4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78296ebf-64c1-4dd8-88c6-d5f0f336c662", "sighting_of_ref": "indicator--30f7641f-e2be-4360-917f-84e45a353834", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c9673e-064c-4751-8ddf-3a27a74343e3", "sighting_of_ref": "indicator--30f7641f-e2be-4360-917f-84e45a353834", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bc5e24-bd4b-4cc9-87e0-bd28139d455b", "sighting_of_ref": "indicator--2b015968-d63a-4f3d-81ad-ce2c3f46823c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0974f83b-e963-41ff-a3b1-5a7b1e269949", "sighting_of_ref": "indicator--24cb0af1-9f5c-4838-b243-a823978bde6c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b053f2-e205-4eba-9d1c-77bf36de48bb", "sighting_of_ref": "indicator--db990c01-b435-4049-adcc-169c2d07e6bb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116be802-b525-49be-aadf-650b66c63457", "sighting_of_ref": "indicator--a6d7f619-15d7-4c77-9a18-e4da35294b3c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24534455-3dcf-4e2d-81f1-dd2bb2fc504b", "sighting_of_ref": "indicator--73c20070-0611-4c5a-a02a-bbdd772428ef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c96c9c-91de-4183-8ee7-2691b43a6cbe", "sighting_of_ref": "indicator--73c20070-0611-4c5a-a02a-bbdd772428ef", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341b70a4-16d7-4649-8986-c57893a16a1c", "sighting_of_ref": "indicator--8a6ebc4e-09fa-47db-a0c6-a345496566be", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdeabea9-ddfe-4b9a-ae03-d83a7d3a8f18", "sighting_of_ref": "indicator--64dc29f7-5f8b-4b26-b205-931a922f9edf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e0bdb0-feac-4091-9aa5-d03a80081472", "sighting_of_ref": "indicator--fd523c6a-e24c-46ee-b3ec-4b480f21b1a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ca9703-a5dc-4d31-9aca-a609bd03f741", "sighting_of_ref": "indicator--14c26598-ec2d-495b-bab6-aa3cd8b00632", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f6d05d-0869-46dd-98aa-09cd7ebe558d", "sighting_of_ref": "indicator--3dd2c46c-96df-4c15-bd2d-20f21d7491ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff9b59c-6b86-4407-927b-51237e530dab", "sighting_of_ref": "indicator--c6faa988-1add-4b3e-a296-9b81f925e8d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9b4f31-233b-4d05-ab9d-2af587059249", "sighting_of_ref": "indicator--89ffc5d1-57f4-4c6b-b945-c9d4cb574f1a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe201bbc-3109-4d97-a6a7-50bd74a1d349", "sighting_of_ref": "indicator--76acf0ca-467d-40ae-b7aa-77604f135570", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5bbc2d-6f1d-45de-875b-c2358cfb3d41", "sighting_of_ref": "indicator--5919228e-2878-4602-89ab-222b1795e386", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a14b80-aa27-4695-985e-51b5706dda80", "sighting_of_ref": "indicator--1bb96ec0-fe3e-474a-b18b-33ab62795620", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef36b09-45f8-4c7b-af42-091a20dca14b", "sighting_of_ref": "indicator--ec1bcc8e-31fc-4ac3-9225-ff57cce49c54", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15542068-8786-4996-adb7-5ff281c55059", "sighting_of_ref": "indicator--4ac95f57-6335-41d1-a23f-0912e21f3846", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8068c8b-dadb-4110-84e4-f71137128c74", "sighting_of_ref": "indicator--0154c545-499b-49af-a3c5-93f9be9a7b90", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702ece76-78ec-40b3-a810-914501e1b951", "sighting_of_ref": "indicator--f3398b1d-2950-424b-9088-d85a1830f97b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d596cc12-5de2-460c-b276-7ed1dc7ae90a", "sighting_of_ref": "indicator--e3a86fe1-23de-4cd4-b644-6c2f5f787591", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64362a09-c094-433f-a7d1-9a62e54d41e5", "sighting_of_ref": "indicator--e3c0e5a6-91a0-4a09-870c-16b9b80f4b7d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bef7e4-475a-4559-b873-ce297e1b4849", "sighting_of_ref": "indicator--70a7f297-9920-4172-84bf-412ac7261ea0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c500758b-2c96-4319-badc-3d13a9ed33ee", "sighting_of_ref": "indicator--c417f5fc-e708-420e-8681-aa5901323bd8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390ed36a-27b8-44af-96b3-936bd41cf2b1", "sighting_of_ref": "indicator--7e691746-c0a6-4f83-ac86-8e9cf39079e3", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4215a5fc-42a2-401c-8de5-ecc74f6ca665", "sighting_of_ref": "indicator--b404adc9-1dec-4c91-893b-75f537e8aeb5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503f52cb-0414-431e-9783-cd769665b2c2", "sighting_of_ref": "indicator--26a58503-d586-4084-84f1-c8d9644da04a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b732f586-85e4-44a8-a461-7d03cbcdbfd5", "sighting_of_ref": "indicator--61fb11eb-c7c7-4bac-9d23-7a9a314a84c9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638825a7-9f2f-4ce2-82bf-b0cd9eb5a632", "sighting_of_ref": "indicator--f2967e05-9ac7-481d-9c55-e559adc303cc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32223c8f-f0d0-4510-bc26-371fa0e97e34", "sighting_of_ref": "indicator--13b71f2f-f008-45bd-bb89-8a4bda661bde", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d992e38-066f-4e10-aa13-d980f649dacf", "sighting_of_ref": "indicator--3a77ade1-30d5-4abc-9885-9ffff795beb3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12664e5a-f2c9-4d8d-a510-5b929c072c13", "sighting_of_ref": "indicator--0fc9b186-e185-45fa-8996-5d6f89819698", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bd8087-fca4-498d-8465-b3d019a047dc", "sighting_of_ref": "indicator--2f705fb3-ff34-460b-a44b-c123327266ef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34db819d-361c-4cba-a7a5-65a63b062e3d", "sighting_of_ref": "indicator--1fb2d776-d42a-4abb-8a9a-6eeeca38d1e0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fc53ed-60eb-4bbb-95fa-ef157a3332b7", "sighting_of_ref": "indicator--7cc6f61f-e881-4802-a706-0e5bd10885c8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06797dd2-1836-4025-9dfe-a062f2910655", "sighting_of_ref": "indicator--028316aa-4483-4a7d-9637-a47b127d6e07", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70395a87-0a95-49ba-a1e9-203c41869831", "sighting_of_ref": "indicator--81b300dd-6d91-4093-8ae8-7348ade50316", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4be63a-f4b3-44c6-b2a0-dbe588e4fbb4", "sighting_of_ref": "indicator--778eb521-f535-4026-a95a-a72ba8e14ee9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee34f742-1813-4bec-ad16-711cd9cd8b28", "sighting_of_ref": "indicator--73b61cc0-6c42-4236-89c8-d73542a8e2c4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90333f24-8085-4341-a3f1-59c7137b5f1e", "sighting_of_ref": "indicator--4c4b3969-30f3-4f55-ae64-31b04a2e0c19", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30ace5d-8f1c-4bd2-8e11-197ec6bc0448", "sighting_of_ref": "indicator--481b199d-bf64-450d-af00-7c2289f0c63f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72c6fbe-f795-45dc-85b3-6c1d9c820ed2", "sighting_of_ref": "indicator--238b77d6-bfcd-40e0-b84b-365a2c7bc305", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc10a2ee-891e-4273-8285-34cf5b5d8cbe", "sighting_of_ref": "indicator--3956431f-b28d-45fe-8d75-8af5d2a491b9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d81c38b-9566-41d3-babd-9521d3752464", "sighting_of_ref": "indicator--6639ba7b-97af-4f3b-ae20-c3f2fe1cdc5d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2dfc869-80fc-48f4-b031-3e0e596bc2ad", "sighting_of_ref": "indicator--1b0a001a-9935-4c34-80ac-1e48229a4c04", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f477ed-0283-4f81-be82-d9f0aad60fbb", "sighting_of_ref": "indicator--6bed1d53-99f6-44b2-9c1e-c1d27df4d77f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de615ff-cced-445c-8d87-57bb9976c358", "sighting_of_ref": "indicator--8fe35dd1-9fe7-4ae7-b410-36cfea93d139", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32df6068-7c96-4459-9d54-c09f0f92a19e", "sighting_of_ref": "indicator--3ed69b63-16d8-4763-a79b-fbc6c806a45b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8139c51-1e64-41b1-900c-c2c6a7d36486", "sighting_of_ref": "indicator--ef90c213-9496-4137-a3c2-7b643c92d4ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8da476-9ac9-453a-a889-700ddaeebfec", "sighting_of_ref": "indicator--9d1ef891-5df4-42e6-84fc-476ffd238561", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d074d17-3795-4e96-a3fe-3e8b7aa2a029", "sighting_of_ref": "indicator--29718ac0-b809-4da9-a85a-26a3b586ca61", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650d2b72-d076-4efb-8550-fc4bb910ff5a", "sighting_of_ref": "indicator--0d3ed526-4f45-433c-81ed-7d0b69b06327", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fff93d-cef8-426a-b4dd-0b4ff7899481", "sighting_of_ref": "indicator--a8b6df2f-f7f8-4071-bdd6-8b2603ac915d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5b0054-4171-4fb3-8961-710f0f342562", "sighting_of_ref": "indicator--46902d84-cbca-4177-8b07-3708adcc2ea2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce50b02-0507-4734-b832-8ad601e3e22e", "sighting_of_ref": "indicator--65631712-fab0-4830-9972-49536b4ee2b4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4e4c1a-491b-4416-acce-4f2412d3f5af", "sighting_of_ref": "indicator--d88dc5be-7c3a-44b4-82fa-176e6bc42bc0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fbb8a02-b905-47d1-8133-2d098f72dd7b", "sighting_of_ref": "indicator--8a3c32dd-f12b-4eaf-82f9-58923cb7c777", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7142956a-9564-4fd1-9927-36e00e3b5783", "sighting_of_ref": "indicator--9ffbae14-5475-48d0-8e10-b660414a5f9d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018c83ef-cb85-4fbf-8a73-cc17f3c8991a", "sighting_of_ref": "indicator--8015a79f-5b01-4682-83ee-87aa2e612fea", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7d11aa-f030-4667-a362-6e4fea0b2a41", "sighting_of_ref": "indicator--8936cb0b-0ee5-48f0-bc11-a0598f1cf330", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3d39f8-fd50-4bb5-aa00-c99a12bfa145", "sighting_of_ref": "indicator--a571691e-407c-4985-b537-24ead94c38ef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b00a2fd-d48e-4369-a924-8244a7aa0d3f", "sighting_of_ref": "indicator--0071c8ac-e9ef-43d6-9615-d221321173a0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872af913-5c07-4668-8aa3-214566d605c1", "sighting_of_ref": "indicator--72f4de75-42b3-400c-b5f4-ac66d8eb73fc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7c5996-228d-4549-824e-77257e29ab64", "sighting_of_ref": "indicator--1627367b-2cb1-47db-87b1-87aa103fd9b7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27923629-1e2f-4cbd-9af1-d9b3ec3842ae", "sighting_of_ref": "indicator--84deb8a9-baeb-4934-abb3-8448f7ae3ab4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca8efb0-c4bd-4107-9678-123905b0aeea", "sighting_of_ref": "indicator--368b2ef2-845a-4f46-9a49-d9c4839904d4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0ac153-2b02-45e4-841f-7333af492d48", "sighting_of_ref": "indicator--1b149ac4-da13-485f-b4eb-62590180e343", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41b1fbe-1c55-49a9-ad31-3d0097eba9f6", "sighting_of_ref": "indicator--48b90635-e465-424a-a883-cd502786f39e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0cdda6b-8a77-44a3-a658-ac14f1ce34c2", "sighting_of_ref": "indicator--01b9e8d4-b11c-431a-9e8f-ae047a47a1a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cd8250-b647-46d9-b52f-edb6b4804452", "sighting_of_ref": "indicator--760f2950-8563-46cc-8278-fbfdc2e8672f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b718c60-6f40-4a50-8503-f93771b2ee82", "sighting_of_ref": "indicator--408ed19c-3d5d-42f9-86f1-401231903229", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9059c7-b44c-41c1-9279-3ca0bc259e02", "sighting_of_ref": "indicator--d57def00-2794-4626-96a0-ca35966bcb69", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0530b0c-9bca-4593-92c3-03b386e0f254", "sighting_of_ref": "indicator--e74f4f34-1760-46b9-8350-5fbe3d620f2d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14db092-be7e-4267-9eb8-d9bb1da50714", "sighting_of_ref": "indicator--dd4f7ce8-dd66-47e0-8cad-31d9358ab8bd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2142ac8-8267-4fdc-a1bc-2151ec721aad", "sighting_of_ref": "indicator--b9af5048-14bd-4101-8e30-b6ae7ade963d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca0d2e5-b56e-49fc-bbab-5e13716b053d", "sighting_of_ref": "indicator--fd958ef8-1ab5-44ea-9354-d3467005116c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50650b1-7293-4756-901f-90272d799541", "sighting_of_ref": "indicator--d6ff7414-2f9a-4058-90e2-e89a685df757", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b04bf7-1bed-4960-ae2c-b32b82549dae", "sighting_of_ref": "indicator--d6ff7414-2f9a-4058-90e2-e89a685df757", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ac2285-d070-4d42-a771-163b84e65c57", "sighting_of_ref": "indicator--0812a873-c6b2-45f5-be75-cab01c726523", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61530d74-19c5-4401-8e02-260811346b24", "sighting_of_ref": "indicator--0e7cc1ea-62df-4955-92f0-8b0cf04490c2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac6b795-88dc-4444-abaf-5ae53299ed06", "sighting_of_ref": "indicator--1bbb66bd-b302-4551-b719-3c143083d74c", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2863bb55-ef29-41d9-a178-0cc904c7981d", "sighting_of_ref": "indicator--adc183bd-4bfa-42f4-82ca-dd7d2a8d6c45", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5f3f86-e8b5-4533-aa48-564b3937417f", "sighting_of_ref": "indicator--1ca12e56-27b6-4086-9340-8a69956cd191", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b3a96c-03fa-4f21-81ed-5a58ec7eacee", "sighting_of_ref": "indicator--c2dda56d-b0f7-4d05-8ed5-07df80455175", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15039a3-3f99-4b98-b543-e21dd378afaf", "sighting_of_ref": "indicator--b9fd2972-0c89-4340-b4bc-3893d0a3925a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764a92ac-ef12-48df-b0a2-0125532243d5", "sighting_of_ref": "indicator--e02f4f1a-741d-492c-b3b9-b0ebe1c0e8ab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147b0d64-9c50-4b10-a96e-1c2dc325b3e1", "sighting_of_ref": "indicator--31549610-c93b-40bd-846c-cecf6ce9405f", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72686f3-41cb-4539-b2ae-3f384459505b", "sighting_of_ref": "indicator--61a8e368-bcac-4cad-a218-b345165288f3", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20630a30-3b61-4e36-9370-078547ef863c", "sighting_of_ref": "indicator--6c12c9cd-0a13-4e75-a76e-90c18c056823", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe10ea6b-b7cc-43ba-9597-bdbe1cdb919e", "sighting_of_ref": "indicator--06b4947a-efcf-4182-9141-26c86887dfab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fd360f-6f17-41f6-8d72-8feaaa9df975", "sighting_of_ref": "indicator--54d0718d-5643-4a10-a2e9-0ad5d4992eab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924c2b5c-ec9e-42cd-8665-d33c5583bb34", "sighting_of_ref": "indicator--90247768-fa29-4433-881f-3951ebbb82ef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4121d755-0859-47ca-a54e-69a51224ffa7", "sighting_of_ref": "indicator--6c74ed5d-21cc-4a61-a5af-4396a293e551", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1c0eca-2fbb-4b36-8752-de306f000a55", "sighting_of_ref": "indicator--0bb0c2b5-3aee-4259-b3b9-0e950d9fa81e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880c5994-ae92-400e-8e8c-e2e2eaa1c551", "sighting_of_ref": "indicator--36cb2434-5d7f-4b97-93a6-d52261b016b8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae23bbbe-a19d-4c95-96a4-50242c1b0133", "sighting_of_ref": "indicator--ef1867c7-afa9-43b4-8ad9-9088c6d3085a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94453d2-bfa9-4304-acbd-d1fd127958e3", "sighting_of_ref": "indicator--d10caf74-341b-478a-9ea0-6e2b2446caa9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d692f4e-61c7-462e-a326-c5b2059de227", "sighting_of_ref": "indicator--b3fb00a8-5259-4783-9d1a-4f1791551d2d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad2b9e5-8059-4d65-b7f2-5474ea3e0542", "sighting_of_ref": "indicator--3028dbd0-2d81-4c74-93e0-c3c1ca94fd2a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e451c7c-11db-43fa-92d9-964bfe905ff4", "sighting_of_ref": "indicator--35cd9dec-1320-4345-b3fa-4ca092e63366", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40288ee-1866-410b-a3dd-570bc09e088c", "sighting_of_ref": "indicator--22053547-e15f-44ca-adc7-b3888a905ffa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c138fc70-4dea-4542-8457-77224924faf5", "sighting_of_ref": "indicator--a1f7b334-0e16-48bf-b20a-dd34e65e4e5c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946c3526-4e14-4e90-b7bb-7935091e8db0", "sighting_of_ref": "indicator--bee41560-a5f6-4b3e-b11b-39a72313c6a5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f252f2-3894-4d73-ba9d-9bc9292dddf4", "sighting_of_ref": "indicator--059f90a5-c0a2-4070-adc0-6099570da735", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360bd616-5882-4660-875f-1eddcba52b6e", "sighting_of_ref": "indicator--4bc3d5d0-d1f6-4b8e-9917-ea95ef3f580e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe5208b-19bc-45ec-981f-249dd40e94d4", "sighting_of_ref": "indicator--784496f1-4376-46d4-a6ea-8d391cee700b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9c1613-b0c7-45c4-9159-1d03801a4270", "sighting_of_ref": "indicator--4f47798f-b139-448a-aada-4730e0d89004", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d588913-bb57-42d0-9c46-3af50deb249d", "sighting_of_ref": "indicator--319b98d7-9df0-4173-9bfc-b107c6ee1a81", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eba1920-5dcd-4b7f-8de2-782fa9c46405", "sighting_of_ref": "indicator--ad0e0e4a-34d5-4813-baef-cbc0ad125a3a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeeaa4fa-743b-425f-a419-41b4238ff772", "sighting_of_ref": "indicator--2bf3c937-a457-4b53-a5db-37c37fb4c040", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65183760-52f7-438d-af92-0c7b57f31b40", "sighting_of_ref": "indicator--79f44424-bb20-4286-ac82-4816a2fa0d03", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cee4df-53d5-436f-8afa-01b7a78d2da2", "sighting_of_ref": "indicator--b1bcb9b2-1e22-48b2-8d0a-257dce6f5b3e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de65224e-a1e0-47ef-b7a0-53fa4c9b608e", "sighting_of_ref": "indicator--d6f1b789-e433-4d22-9822-3d9dab81baaa", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c956fb-a732-4cf4-8c53-09072735e6c3", "sighting_of_ref": "indicator--a409010c-0400-4adb-b21f-ccd7d9ea16e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8371a1-c053-49c8-b7c3-0268120199a2", "sighting_of_ref": "indicator--5fe20953-6a00-4ad8-b70d-83b6ed831bde", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14658d7-17bc-4d00-a073-29f90425ce36", "sighting_of_ref": "indicator--3dd4567c-46de-4203-af29-e9aa1ba930ca", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c0cb0a-153a-4875-a2ff-f300b3f3848b", "sighting_of_ref": "indicator--6872278e-8d3c-4e64-8f7e-79bccaa35bd1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4451562-0a82-4df9-bda2-f670b2c05bf8", "sighting_of_ref": "indicator--ca28ea5b-5408-46e6-b18c-80845a7ed134", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c063aa2c-a519-4d6e-9e6c-f5780c1954df", "sighting_of_ref": "indicator--8c4d4b89-161f-4b91-bbc1-2d2b3740958a", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010b04d3-a83c-45a9-94ad-0e372f4290f4", "sighting_of_ref": "indicator--b72ae793-11a1-41e6-8123-c55d857d8b71", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e8c503-dafb-4bdc-861d-68545ba52aeb", "sighting_of_ref": "indicator--5929f3ea-a8b6-4899-b466-84ec324b87d1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08d424b-4b5a-474d-a192-a83281d152e2", "sighting_of_ref": "indicator--30cc071d-ec17-4946-8c64-d8fe58b128db", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c1ab49-606e-4670-bc2c-12ae78fdab8f", "sighting_of_ref": "indicator--16b2ffcd-73a3-4dd9-8699-868eedd104bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694ae814-f8eb-4d89-bb09-f6d002e90603", "sighting_of_ref": "indicator--0fee1485-c735-46f3-a7a3-95147418b434", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae72497-c9b0-4c4b-9b1d-b17b8f90e75c", "sighting_of_ref": "indicator--16120e76-6f6c-4ba2-90d6-59017d9ff547", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c332154-124f-424f-a780-cfbe1fa007ad", "sighting_of_ref": "indicator--263a5c82-06d5-4420-bf84-97bd7e2fce2e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3458184-70f5-4dec-9b44-c02083300aba", "sighting_of_ref": "indicator--52f3ddb5-9136-4d39-bcdf-25054ee15648", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976938bc-8a30-4d22-adc8-c00725429fc7", "sighting_of_ref": "indicator--d4de7b6b-6850-4e0c-9a52-615190db00e6", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d656a9-8aa1-4526-ac18-17e812df2dad", "sighting_of_ref": "indicator--228612a9-261e-4800-bf34-36ac5c34b4e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432e8461-aba7-40b4-b272-0fc318fcf5c6", "sighting_of_ref": "indicator--c63386da-3881-4663-849c-a9a5a4717aa4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf47ae0-c865-4766-a14a-96d5b823145c", "sighting_of_ref": "indicator--db0ce43c-0ea6-4ec5-869c-408bef8bc77e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb4dda4-6803-4f21-a250-0afc89fa3196", "sighting_of_ref": "indicator--64677ba4-e0a3-4945-89c8-4c7df17209fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8b387e-d3ce-4658-b392-12fe99c374af", "sighting_of_ref": "indicator--1fdd4349-b2e5-4062-b948-5eedaaa17db0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4d207f-2f02-4100-bd7b-9bd02ea5129b", "sighting_of_ref": "indicator--a924651f-1808-4aaa-891f-55a532d72473", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8cd986-4d45-4909-b531-7575e0beeb9d", "sighting_of_ref": "indicator--f77e1cc9-7b10-4035-a3c3-70ca8468214b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5318af1-e31a-49ed-b14d-d0fb905fc8c7", "sighting_of_ref": "indicator--89156838-70d1-477c-81ce-344a282de9d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d88784-b893-4614-bb10-2e650f209aa7", "sighting_of_ref": "indicator--2e794773-56a2-43a0-8dfa-48483463d81e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28a78f9-56fd-4e83-8226-bc8ca07af351", "sighting_of_ref": "indicator--de11ce64-a071-440e-aa9a-c0e552fc0e67", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b46ca4e-cee3-4d00-83c1-799ee8bfa53c", "sighting_of_ref": "indicator--cb3959c4-4100-4c5b-9e6b-ce8643157873", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65107950-1c36-4c58-b95f-36337d136eb5", "sighting_of_ref": "indicator--82a2c870-1e70-4c84-9096-4769ecc62f32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9919bf6f-b827-459f-a9dd-760c70efc04a", "sighting_of_ref": "indicator--cf3f7b53-342f-4882-9da2-4d02516a9b32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725af68c-e8e2-4e19-b1dc-11624918fd44", "sighting_of_ref": "indicator--8e074d95-0299-436d-8475-419a297fe431", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16c2f31-3b4a-4afd-aeae-ee0d367d0af4", "sighting_of_ref": "indicator--1b8d5673-6e54-4d88-a1c3-57dc27c5f611", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04ada31-1ed4-4802-83db-caa864bd2d5f", "sighting_of_ref": "indicator--71ff0f9d-5339-41b4-aa2d-3677cec5a0f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49342b55-4c95-4d1d-97f2-aa1ca246c1d3", "sighting_of_ref": "indicator--d757dc1f-eb4d-4e1f-ab49-888e88e42089", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f0f090-8550-483f-a08d-387baf5568cd", "sighting_of_ref": "indicator--17a80e7d-3f0e-422c-b245-33d6036b0861", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642ab31e-8044-4c2a-8fa5-0482a5f7508e", "sighting_of_ref": "indicator--1ab11491-9647-4fb8-bd4a-c79eb0f9f34a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8351742-baa9-4631-9aea-42d9a3072b40", "sighting_of_ref": "indicator--599ff886-95a8-42a3-9a61-50eb876a4923", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8927cb-0f8b-4548-99fa-af8f2bd05c60", "sighting_of_ref": "indicator--d0c5bd32-a0e6-4765-8ec8-f1ebc4e4a40c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a675420f-065a-44bc-bb25-f1c1407ceac3", "sighting_of_ref": "indicator--fb442c93-a6ea-4819-8028-3d3e771ce596", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7eedd0-ffea-4441-860a-267bf4f82266", "sighting_of_ref": "indicator--56eadbc6-b6e4-4a0a-8c34-c941d26ce62b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca3a641-a3dd-438c-a776-f8666dc931ea", "sighting_of_ref": "indicator--aadab1e8-2493-4623-9c99-d50e69832bc6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf707d6-8512-4ad9-a070-15e939d623a0", "sighting_of_ref": "indicator--75f3b04f-e686-4061-a401-3749e0047807", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3af7274-b986-4606-a911-af98b4d82a04", "sighting_of_ref": "indicator--1be28030-1379-49d7-a993-72ba05a0f07d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781dece0-3c94-49bc-9b8d-d423d0158d38", "sighting_of_ref": "indicator--df2781fc-387f-4efb-bfab-3d735dc00074", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d5b1af-6332-4308-be51-2e81126e0c3b", "sighting_of_ref": "indicator--2d3b5e7e-2b2b-4fbf-b191-30bd9d958861", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e087599-acb6-49b7-809e-cf3d39a7ae08", "sighting_of_ref": "indicator--92a1dc32-6ea4-47ee-9286-83badfbc2076", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ae4dae-5d39-4dc8-88f6-7d7e06b03215", "sighting_of_ref": "indicator--c46d597e-df39-4c65-8492-0822d9d32d94", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108ec344-b10a-4d9c-9c91-5cc1d5c76783", "sighting_of_ref": "indicator--1b6345fd-c8b7-4572-9b2d-0c785f420591", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a8a5a0-b871-4462-baaa-4b2a80ed13d3", "sighting_of_ref": "indicator--692c3e4a-3a78-4006-a9eb-f4431ba0d4a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1346453-806e-4fc4-b024-f60ea79a5a8d", "sighting_of_ref": "indicator--26742653-d153-4153-8e8e-b141efa4f2c7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3f7c83-87f9-4e03-9e1c-794d098efcbb", "sighting_of_ref": "indicator--9851895f-7c7e-434a-a39b-1339bc35f4b5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43dc18b-64dc-4ac2-95f7-9d5ee429dd46", "sighting_of_ref": "indicator--e8b00c83-1e82-4ff1-a135-5693ddaf4397", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06265f51-e6cb-48fe-aa51-040186efcdf3", "sighting_of_ref": "indicator--cbb0132f-95c4-4d9c-abc9-c3c63c0e7b79", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24171513-8671-489b-88c1-865178b3b4f1", "sighting_of_ref": "indicator--725fbd84-7762-408f-9341-a8eebd92e142", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb35cd6-78ae-49aa-b15a-4d187c468eb6", "sighting_of_ref": "indicator--d88d5421-baa4-446d-9e5c-f54ccb74181b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6efebc9-9c06-4c82-9777-467ee1bb516e", "sighting_of_ref": "indicator--4e924776-88dc-43d0-ac82-33a781a874c5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5881dd-c1b0-4f37-96b9-977de56f8196", "sighting_of_ref": "indicator--24a48479-9f31-452d-912c-911d6ff84ac2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16d01b9-5bff-47b4-87b1-f5e9941ccf9b", "sighting_of_ref": "indicator--723031c7-5455-4357-9404-878aa8323e0e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b698f6a9-38d0-4e08-8ff4-57dd280ad577", "sighting_of_ref": "indicator--06f1f12b-1df0-4917-b6e8-aef8c9c535c4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f018309a-3bc2-4431-aebc-ccc017aab636", "sighting_of_ref": "indicator--97dbd2fe-ccab-4884-af17-a01e0e4f11dc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f55b1c-0d20-4cb2-81e3-034ecbe8a4b0", "sighting_of_ref": "indicator--e2ed2e4c-62bb-4dbf-b573-7500b8690346", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22282c30-0a1f-4488-aa01-92f105d7cf5f", "sighting_of_ref": "indicator--7bfec3a6-47fe-41ef-a28a-0e35a644c026", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022e0553-a6c9-4c59-9346-0641c7175288", "sighting_of_ref": "indicator--a507ccde-e6e7-424c-afc9-de2585c849e2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5859c0ab-5d1d-46ae-9765-d54d26488753", "sighting_of_ref": "indicator--f3430b53-fbd6-4f76-a44b-4f0c0e18b7ec", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf6aab6-acbb-437c-b021-046ef0f268aa", "sighting_of_ref": "indicator--28111d66-4dc8-460c-8cdb-1b1ef02d4d4b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15cdd89b-4d82-433e-8c5d-94ed6d189f92", "sighting_of_ref": "indicator--f1b5ddcc-c0af-46b5-9a18-f397ea6d2daf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbc04e4-17c4-489f-b624-91217fc1ba2f", "sighting_of_ref": "indicator--1e03bb8f-e2ed-4110-87a5-e48a5ea36656", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879989b4-7ac1-4a4f-9e19-4badb86bfca9", "sighting_of_ref": "indicator--a7e6b31c-a06b-4c16-b6c9-e434a5e89379", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca78edf-ccdb-4561-a0d9-24f0ca2c7484", "sighting_of_ref": "indicator--df3fa7b8-3ac4-4d4e-adb8-97c1650d9406", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a627790-bb08-4e8e-982a-131b7a0a95b7", "sighting_of_ref": "indicator--b857cb19-a7ed-4606-a96e-8d84058c4348", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9250c633-e384-4ee6-b415-afd14e7cc6a3", "sighting_of_ref": "indicator--fe538479-a113-4afa-a8dc-d84be3b175cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f665129a-c16e-4901-815a-f9ea23a326fd", "sighting_of_ref": "indicator--77de915f-03fd-4758-b4ec-761cdae88310", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e366b1-263c-4a5c-96bc-ea678b265f3b", "sighting_of_ref": "indicator--63ad6566-83b4-4a3f-90c9-a59c3e61278d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a9db2a-70c9-4a54-a582-e8cc5dbe3b96", "sighting_of_ref": "indicator--57707e95-a444-44a6-8348-8e5ec15e59b8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1278f02-0583-4d62-84de-a97e6d3f9b0a", "sighting_of_ref": "indicator--606e97a3-c108-4fe7-89c8-0d642069bb8a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613757e7-74fa-4653-8930-68534c3b2710", "sighting_of_ref": "indicator--167b685b-f2ce-46e4-9814-9be280a32d04", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6577b0-79b1-45be-a7fc-61735970fd63", "sighting_of_ref": "indicator--908b7e37-eebc-4c9e-aa14-8d24b61eb2b4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b36713b-602d-4597-806f-dee099dcff18", "sighting_of_ref": "indicator--5e1c0725-652a-46c6-ab2d-8300227d7550", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6be3331-4229-4d6c-9a04-a627bfdbe844", "sighting_of_ref": "indicator--86705db6-7d84-4000-bd9d-337488299ef4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad4a581-651f-4fb8-827e-f345ea34a7fe", "sighting_of_ref": "indicator--e1df7a5d-1f99-412b-b048-1ded2adb06b1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3b8e0a-ffd7-43c9-aae0-429b9c6b3549", "sighting_of_ref": "indicator--859d2e5c-7e23-431c-93fb-bebb4dc4a01b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1281622-ea20-4f66-b65b-9e2f10e5be9c", "sighting_of_ref": "indicator--13125563-99d7-407c-92d5-e9579d732b17", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae67384-e33e-4f08-b9c3-5245b3229d0d", "sighting_of_ref": "indicator--3892684d-7afd-45e8-8c85-fb7a7959b0fd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32555212-2b0b-4f04-9ec4-eaf077af6596", "sighting_of_ref": "indicator--4c25caa4-6cf3-480e-8a9e-f996ce4c23f0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc1e522-6ceb-4c9a-a13b-cb6be824033e", "sighting_of_ref": "indicator--8d8e065a-0784-4f79-a7a8-288445d573a5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34952dce-f79c-4b8c-b6b7-09b3788a7e6a", "sighting_of_ref": "indicator--9b540787-2e05-4b75-813b-ad65267719dc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aac49a1-ecde-4623-9c45-3ba653d0bc23", "sighting_of_ref": "indicator--5b10393d-b629-4530-975e-bc7fbd20b655", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46278c7f-7aa4-496b-8a87-d4ddd884f328", "sighting_of_ref": "indicator--e163ecef-cfad-44d3-9e49-ee1bb7d285d3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a62f115-6bee-41c0-96e4-c6552b296ef5", "sighting_of_ref": "indicator--2e42f336-e8e4-4958-bd84-d7ba1df07b9c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ae429c-ce72-48c1-8629-539df89b8a16", "sighting_of_ref": "indicator--b768f703-43e7-4345-a130-a6af0ca9ebeb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4681b3e-c30d-4dbd-a606-9304c1c389bb", "sighting_of_ref": "indicator--ebe58fb1-7e4f-4514-868b-ac34ad95b3ef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bf2a12-2ecd-4a50-8a95-7f6264ee3025", "sighting_of_ref": "indicator--1246f774-b727-4b6f-8088-da7eaee45dd0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4b542c-6749-44e4-9734-ae33093da458", "sighting_of_ref": "indicator--747f544d-ad3d-43f2-9b39-235441ae2903", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ce68f7-ca89-4c47-96f4-b077f67fe2d6", "sighting_of_ref": "indicator--d88e27c8-7d6b-47c6-a6e3-d980013a4a4a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7320c4-5335-44b5-916d-8b31ad738aa0", "sighting_of_ref": "indicator--4461e9c7-144c-4f24-b3aa-1c72532262de", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769dee5a-a62a-4845-90f7-0560cc4494f4", "sighting_of_ref": "indicator--6c050860-06bc-45a6-a1d0-0be79b46924a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0564db45-469f-4b70-9aef-5a9422ab4d56", "sighting_of_ref": "indicator--6fd87652-bb55-495e-aa81-98b2831dc654", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042840eb-cdc8-4466-9451-3aafeb2500e4", "sighting_of_ref": "indicator--04da5041-e420-4b0c-bb82-d741e4d7453a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66b9331-4d66-4987-8236-935ace50d164", "sighting_of_ref": "indicator--12b0283d-f19f-451c-95d1-c02629ca7566", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4151d337-850d-4643-b7a5-facec1b7f9a8", "sighting_of_ref": "indicator--671162a3-1ad7-4df9-be61-b582ff425644", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493c3645-f1e2-4920-b598-8b65bc4cfee4", "sighting_of_ref": "indicator--6d0ed322-a094-4ddd-b4aa-35342104511d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f18f3f5-312e-42e5-b520-98d166b0ef79", "sighting_of_ref": "indicator--b72cd4be-034e-458e-a468-2ccce5f9c413", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a870c01-a289-49d2-9200-59b2b4563d00", "sighting_of_ref": "indicator--5cab1286-ad61-4362-a13f-a422b847f8aa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf16d20c-719f-4058-afa6-309a5d3fbc6e", "sighting_of_ref": "indicator--13df4492-276a-4b9d-9ad9-aba97ac01867", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a161fbe-41e0-4917-b47d-bf5f98820836", "sighting_of_ref": "indicator--5df9730e-460a-4f0f-88bf-035410b6ab11", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ba04e4-15c2-4134-b345-7bfca5d1099b", "sighting_of_ref": "indicator--c74f3a1d-5aee-4c3e-9b9e-0e67d080cf4b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17afd9e7-94f4-4601-bd1b-60f30b88a918", "sighting_of_ref": "indicator--2c2c97c0-50f8-4b68-a607-66f49eae5e64", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b935cebd-7e3e-49de-88a8-5dbfbaacc53c", "sighting_of_ref": "indicator--9441253d-1e20-48da-9fc9-36bf35feaba8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01404760-848d-4d8d-945d-7e9e016e2112", "sighting_of_ref": "indicator--b65185a4-a806-4a6d-b289-e96c39358371", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82afec60-5c1c-4622-83cc-ddffb2fc8c39", "sighting_of_ref": "indicator--4bcc7cdb-88dc-41af-ae75-3f5143975b23", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a80622a-7ffb-4df2-b7ec-e8bb38d7f329", "sighting_of_ref": "indicator--63254365-bd36-48b0-8e27-3bed4c0507dc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ede097-7fd0-4bf6-8455-ae954a660f08", "sighting_of_ref": "indicator--e1c1f440-5269-43a0-8b80-9bd7808db8b5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a69b94-929d-4d76-b643-20f76ca5d23f", "sighting_of_ref": "indicator--8559af51-af47-4751-bfb4-9498017591dc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2cec89-fcb1-4e2c-8e09-5002663a5d4f", "sighting_of_ref": "indicator--d99dbe34-9a1d-4719-8efd-5cdbc0f22cbb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8097b7bf-b73c-4c00-bc40-a2729b78b2e8", "sighting_of_ref": "indicator--cb7da62e-4558-4773-88a8-17aa7fece205", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741f3324-db72-458f-819d-8635992749ec", "sighting_of_ref": "indicator--2b87e9ff-7c20-4191-b842-f43caed18965", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f05fea-0ba9-44da-b2f6-5cd2fcf9e754", "sighting_of_ref": "indicator--d98c9373-a14b-449e-a03d-247c9490ed1d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8affb3-035d-4141-9954-a6b804990f9c", "sighting_of_ref": "indicator--50f5add8-edbd-4570-b2f6-16b0023772bc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4607a39b-dbea-45a6-90c4-debce9ef5eae", "sighting_of_ref": "indicator--93504b36-6f4d-4625-ad30-ee7647e3bb65", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0cb0fa-e5d6-49c7-9e9c-314b44cd9a30", "sighting_of_ref": "indicator--9ac0db8b-7b51-49b1-89d7-2b71929d55a1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32214d9d-2d23-4df6-9be9-0fae5c4a4a28", "sighting_of_ref": "indicator--7308cc54-e6f7-4480-a7ba-df4fe6674746", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a7cd76-cba5-4f3f-b330-3f36331d0565", "sighting_of_ref": "indicator--cd37f6c5-2bed-4a0f-987c-1f94c9701838", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e076761-9970-4920-bb06-19def944b216", "sighting_of_ref": "indicator--1156de32-f10a-413c-9ebc-12540f975845", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2537f1c4-a64a-4b53-bcb3-849698f6b819", "sighting_of_ref": "indicator--7aa170b6-2f1f-433c-af3c-536da2797523", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b07abc1-b10f-43ed-905c-e7f70da2f373", "sighting_of_ref": "indicator--14234ff1-e177-4083-88b0-960e5d755afb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a37165c-acb6-45cc-b8da-a090fe6c78d3", "sighting_of_ref": "indicator--b45784bb-79a5-4bb8-ab19-70fd1639e754", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b96bd1-0147-466a-a97e-79a8430b31d5", "sighting_of_ref": "indicator--83e3b653-a3ca-46b2-88b9-3b2ffec35e7b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa8dafe-cf7f-4efb-a4d5-651db776ffdf", "sighting_of_ref": "indicator--937b7e96-b104-486d-a34e-db7a3774ca84", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2552b0-5542-4136-bed7-197efebfa23e", "sighting_of_ref": "indicator--b709f221-dd98-4653-8b16-0536cf3f649c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db23385b-e47f-4aa4-92d0-20e85f030845", "sighting_of_ref": "indicator--4cff7a19-80f7-4cb9-835f-d8c5c3a3660d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e90b181-2ced-4c48-9919-eb0924d88d32", "sighting_of_ref": "indicator--289cd969-2383-45be-b9d8-26f5187b4669", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c71bc9b-3855-421e-bfba-f39bdc8cada8", "sighting_of_ref": "indicator--15e6c2fa-5c26-4026-b9df-835f1d3a94bf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8632c7cd-83fd-4b77-bcf9-10e60c292a11", "sighting_of_ref": "indicator--50a30fd0-a970-4c48-8a76-5dddb4f94230", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b576a9-273d-4fea-af40-012e7a77ad5a", "sighting_of_ref": "indicator--54d9f1e3-d927-4f91-9971-f3b380a30630", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148ace5a-393a-4447-ada7-2f9bf3f0b85b", "sighting_of_ref": "indicator--70c0da33-496b-4005-9b97-703144a93c4c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55defaad-4d93-476b-a5f4-6b7a0e1c81d4", "sighting_of_ref": "indicator--d2af3090-9239-4e92-b2ea-a6418ad54dcd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d73888-847e-41cb-bbd1-3a4c4eed0159", "sighting_of_ref": "indicator--0412d5fd-1f63-469f-8c7c-af29b5ea302a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2762843-41cd-4f9c-9223-412a8df54a62", "sighting_of_ref": "indicator--a41903b8-fb31-4fa7-ae8c-b5bec90a6124", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbc1fb4-f2c2-418d-a9e6-0621409cb400", "sighting_of_ref": "indicator--421ab847-2ceb-4b6a-987d-80c092bc59ee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204508ea-9679-4bb3-bb81-c69274f40f17", "sighting_of_ref": "indicator--dd92c8ae-20df-4878-bd64-9d11cac6addd", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d98d19b-be77-4e0b-adca-842e8cc2dba9", "sighting_of_ref": "indicator--d0580bdc-598e-403c-9fe4-3d1e953a73cc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863b07cd-0a6d-4a9a-bd35-e8927da72365", "sighting_of_ref": "indicator--0ae5084e-0d29-414a-831c-e5d67eefd434", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cffcee2-acd8-4f3d-a8e9-3213f2a7d5d3", "sighting_of_ref": "indicator--f59a1c68-00f7-4b89-8ce3-a9314887f3a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6fd0e5a-553e-44f5-a3b4-ca3284ab5879", "sighting_of_ref": "indicator--7c936a3b-1d80-4976-b023-e2ef0e741f52", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab907e1e-d0c9-433b-8fb7-039be80103fe", "sighting_of_ref": "indicator--0f250c6f-d43a-4568-86da-bd1bbe0be7f6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2836d656-e457-4058-b0f4-a084cd5809ea", "sighting_of_ref": "indicator--c71693df-aa03-4699-825d-99a3824be107", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29af7d8-a79a-44e0-9fb0-7c6044bd915a", "sighting_of_ref": "indicator--19aacd39-c323-42f2-8840-ec15e1553cbe", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdae51d9-e958-4aa3-84a4-766e0816042c", "sighting_of_ref": "indicator--7073482b-cad1-46f6-914b-4e028cf0c28b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba23a819-115d-41bf-a45f-99b937ec8214", "sighting_of_ref": "indicator--f89c6ae7-3195-41bc-96dc-8c6be5a4e538", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9678accb-f4f0-4cac-ab5f-9986a316743b", "sighting_of_ref": "indicator--42f71799-7021-4610-85c5-5adc818102b9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4527dcca-fd4c-4cdb-a5c8-8b4cec6317bd", "sighting_of_ref": "indicator--36c3fa7c-1bfb-4637-a913-a4a609c0ae1c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13254e5d-5d34-4a28-9472-d687c738cc66", "sighting_of_ref": "indicator--4b98af03-158a-44a4-978c-85a52907dba9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5968ca54-343e-4555-8371-c1227472bfc9", "sighting_of_ref": "indicator--4cf1e15c-f10e-4396-8453-f42314dd847f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a04ff5-741b-4f25-b498-6418edf73d40", "sighting_of_ref": "indicator--39bc931b-ac47-41e9-99f2-eb36a45e9586", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05703960-cc6e-4b62-946a-abe6eda778ab", "sighting_of_ref": "indicator--3ebec5d0-4c03-49b7-9165-c0baf4cb40d8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a15cb91-2fe6-4719-82b9-f29aafeacec0", "sighting_of_ref": "indicator--818b5a31-6dbe-4f30-af33-6ab628a1f9cd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4c7871-d9f1-43c9-bec7-6239bd9d3395", "sighting_of_ref": "indicator--6410f8c6-b39d-44d6-9849-f38afe42ea20", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a18d152-4b40-42d3-ab5b-a09430a429c2", "sighting_of_ref": "indicator--a74a9837-237a-40b9-bcf6-a356255aebc9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025aa09a-7ab7-48eb-991d-d6ce65a7f7e1", "sighting_of_ref": "indicator--1cd85eef-0098-4b1f-b13b-a490198a82bc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2258221-e934-49b2-8ed9-7ec5039542c8", "sighting_of_ref": "indicator--851f61f4-6e57-4e89-8e8f-c7b1a1f5e146", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba1e5bc-ae67-4c76-be25-0c730bb45d60", "sighting_of_ref": "indicator--43f9f813-76f3-4f68-8c05-a1cc69a70222", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb3b086-962b-4c30-806b-9d2789e3b26b", "sighting_of_ref": "indicator--fc4d9ee3-23bb-44d3-8da4-a82d1be30009", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3efb78-96b2-4ec6-a90d-c8150c4bb608", "sighting_of_ref": "indicator--288d9ecc-e012-4729-87e8-c3092c9760e3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875e21ba-21f0-4cc4-8709-246a37234484", "sighting_of_ref": "indicator--d0c023df-6fef-449f-a031-cc04b78487ca", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1162791-8252-49fd-a141-f25c1eedf10f", "sighting_of_ref": "indicator--90eddec7-9f39-443e-81b1-5855c1f0ebf5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ab0665-7c24-4981-93d4-e42f49db771a", "sighting_of_ref": "indicator--76470860-63b0-415d-a015-bd7b0e8d6347", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2a6752-54d9-430c-9266-0f68ab761b2c", "sighting_of_ref": "indicator--7b25874a-7d2a-48e0-8e75-f03400c59f04", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd510de0-8cf4-4676-9634-dd76da7eaf14", "sighting_of_ref": "indicator--d07f1d50-97c7-4dd8-82bd-45ac4b8ed24e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e672f4d4-7b55-4209-9a54-6a951417a557", "sighting_of_ref": "indicator--a8365bcf-ca55-4c0b-8e57-be6f4d58c793", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffde1fc-e8e2-40ea-943c-33d06974f4d5", "sighting_of_ref": "indicator--a05a8624-aaf7-415b-a85a-4bd62e2648bf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c261355f-0f80-467b-b1ed-2554c297729c", "sighting_of_ref": "indicator--5a676369-1ac9-40e1-9498-5e980261440f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a0039d-2b96-425e-ba58-e9e8674a6556", "sighting_of_ref": "indicator--0cc08a56-bbf8-4bc8-9ea8-7d77e6324e0c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9cab2d2-b7f4-416d-af47-7d52041e3826", "sighting_of_ref": "indicator--ece4b025-6a78-4602-87a0-e03507c6a4ad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93e6865-0b0e-4a0c-af45-c01f11704274", "sighting_of_ref": "indicator--382a94e2-1679-411f-bf6f-e466f04f9c18", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d483fa1-a271-40d4-8109-cedc15e0ffce", "sighting_of_ref": "indicator--8d09c4c3-f612-4c2a-8935-16ab39d370f3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcfc618-7fff-448a-93c0-3a0016f97efa", "sighting_of_ref": "indicator--73a19d06-41ec-4353-85e0-d4691b5ed211", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a36dac-5a40-46d3-9611-beddc6c3986d", "sighting_of_ref": "indicator--d6db6943-c30e-4f1c-b0b4-aff6ecdb33fa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56aca5a4-4901-4be3-884a-eddbcc55b0e1", "sighting_of_ref": "indicator--f7382963-1ac7-4be1-85be-a83e3af41fa8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef6eda1-2170-4eb9-b035-f7f4b39d4525", "sighting_of_ref": "indicator--58894e4c-d8ea-4625-adb7-8543108287de", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ab4d33-d688-41e9-8c28-de354dbf68b8", "sighting_of_ref": "indicator--ffb46e66-df80-49f7-bcf4-4ffbb71d3ef8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0556e374-02c3-4e36-95d9-03449c647026", "sighting_of_ref": "indicator--8fe66c8e-5b74-4f5f-a7fa-49f343f5f684", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a8491d-ae48-4b02-bd82-e08f60049881", "sighting_of_ref": "indicator--357c0ea4-38a5-4733-8f78-d11466d6670d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7355ed49-2cbd-4e7e-a78c-757b7f04f12c", "sighting_of_ref": "indicator--3f5864e3-add2-4e60-95e6-29e022cb56a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6ab779-ad98-4e8d-b760-ea25b464e67f", "sighting_of_ref": "indicator--1344498d-13b9-4d31-91b6-1ad8a12c9a06", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f147f0-87ca-4411-a3f8-e3e03246be87", "sighting_of_ref": "indicator--e23f9d13-aa2a-4207-a035-4b1d5c186232", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031009b0-b02d-4274-a0df-0fb890689ef5", "sighting_of_ref": "indicator--ba9ac669-d71e-4f00-89ef-1d5404a74870", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d6bf47-03f7-4035-a042-eab0bb4dece8", "sighting_of_ref": "indicator--695d5333-558d-4864-be6c-55a1a74cefae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b682ab06-848f-456a-8d92-aee6d602b017", "sighting_of_ref": "indicator--4f9b9688-4860-44b7-9bb5-e3639a43984b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165616f2-61b1-4ade-8e60-16f8adc4bcce", "sighting_of_ref": "indicator--5c7ecee5-b927-4e66-8539-ff5d1433eec6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7444caf-d512-4bca-9d6b-77af372e7a7c", "sighting_of_ref": "indicator--6ae2ac71-e815-4b81-a517-161e8d1884c8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597817d3-ff77-4e63-95d8-ffe929ea212e", "sighting_of_ref": "indicator--65000580-2709-4980-9373-6c5c6d75c104", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5cf2fc9-2e6f-477e-836c-3bd074313c82", "sighting_of_ref": "indicator--6972f62e-db50-4cc3-8fdb-8fd9c721fba8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3409a33f-a880-405c-994a-29414dd1fff1", "sighting_of_ref": "indicator--96cd5bc5-d2dc-4ae2-9cc8-64e5fd7380c4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63675295-30ff-41fa-8c64-d7966057e1b2", "sighting_of_ref": "indicator--fc5d1232-690a-4155-872d-41f3ba593696", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2ac03c-1460-4c25-9474-c8c7ef9078ed", "sighting_of_ref": "indicator--a53392de-0d7c-4b8e-8635-5e0f7325a0bd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c013f6-6d63-4183-ad89-6c16ae752f13", "sighting_of_ref": "indicator--c72a34a9-3282-440d-babb-89ab0ff909e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f484d094-1702-4aef-9db4-6032b99c4752", "sighting_of_ref": "indicator--0d3427a4-8215-431f-b86f-79a073a2ebdc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd4f119-ec07-416b-877d-c8f626393866", "sighting_of_ref": "indicator--a0e756c7-bdc3-4634-896d-7cba419b2ec2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3029614-f9a7-41d8-9b92-5e6bc487c2e9", "sighting_of_ref": "indicator--9b5e9bca-c9da-44a2-a8d7-bbb96cfd6888", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4aace82-cee2-4d06-aeba-7d6a1b88e547", "sighting_of_ref": "indicator--96cba06b-7179-4531-9bfd-d57aa6dc8464", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1a8274-79cc-41e0-8c0c-14003be40799", "sighting_of_ref": "indicator--18260245-3b01-4c8f-bc68-b3979b80524c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d72132-fdb5-403e-8b67-f5c75d36b935", "sighting_of_ref": "indicator--2edf82d2-fb2b-4489-8b94-b080a8b4c4a1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45825d5-ba2d-40f7-8cc0-b6401475f51b", "sighting_of_ref": "indicator--3c3a1a45-61f7-450e-8025-9a3b2d57c61f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535c7a72-96a6-4a7b-a2a8-762a0eebfb31", "sighting_of_ref": "indicator--6c957372-bbc1-434b-846d-16b8ef8ff542", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3697d227-cb8f-4ed1-a599-4f73da08d711", "sighting_of_ref": "indicator--d30788a8-09c5-44d4-a958-1d9dbd69ec90", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f8e1d3-795e-47b1-ae65-4d99a5e13bb7", "sighting_of_ref": "indicator--3ad21c52-04bc-48b0-a25e-7d4ca7e47d78", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce0e52f-6954-4089-a9df-164c917fb913", "sighting_of_ref": "indicator--83982e76-1bcc-4c26-8707-2ff6711eb7df", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f01bcb-2109-4ecd-a7b6-38a10e278326", "sighting_of_ref": "indicator--115afa46-e4ba-4496-9cf5-cc9f9145adc2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97e0914-d035-4e95-b9a0-2164e3d0d8a0", "sighting_of_ref": "indicator--85c0a318-85b3-40d7-8064-23dcc1b49eda", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d4f379-b7b8-4ecd-908b-5fb78f648b9e", "sighting_of_ref": "indicator--c8610cc2-059e-4fd7-b240-2e3ba22712ca", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07cf4e3b-becc-4eb2-a19e-cc0ee1301e02", "sighting_of_ref": "indicator--724f20ec-7d85-41dd-a047-fdc8dd94ddb4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ad39ae-2b91-4e5d-8e7d-27182a5d4164", "sighting_of_ref": "indicator--af029a67-5ff7-4c7b-bf1e-eb2dcaa9c991", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d74eff-00c8-4016-bbe8-7d88a5134ddd", "sighting_of_ref": "indicator--1b33f9e8-76ac-4be5-a6e2-2786885a1451", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef76128a-b4f4-448d-b812-0e3274ed93bf", "sighting_of_ref": "indicator--1ccdc524-7ab1-4e6e-b107-bc5b6418f79d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb38f62-5994-4053-8f8f-ab6a7f762e23", "sighting_of_ref": "indicator--51f81812-daac-4b8f-a15b-fa8c5d0f608f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c76310c-df89-4dd0-b1ee-1ca813b5c0fe", "sighting_of_ref": "indicator--c96078f0-ee2a-4662-a5c4-710f158d4a6b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800a99d8-207a-4c22-b6f4-240ef3763334", "sighting_of_ref": "indicator--255ce190-b6f9-46e7-acf5-f1e9a85b015c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35bbb141-c5de-439f-9b53-1028d97f5de7", "sighting_of_ref": "indicator--344589ca-3d12-40bd-9725-486a70ed3bc2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f72d79-a714-4776-817d-ebd0b998b0c2", "sighting_of_ref": "indicator--bb7fd300-c249-4c11-a3de-567dfc8109a3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a58c8d-b7c1-4a7d-91c2-fdc5ef80e3dc", "sighting_of_ref": "indicator--bcc84d3b-07b1-44c7-b0e0-94037549cfe8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db49cbb-7368-42ab-babc-cfadda79aea4", "sighting_of_ref": "indicator--f5675464-8749-43d2-b20b-23bc1fd5bfcb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade0b53d-04dd-4595-98ab-1f9ab3cce1aa", "sighting_of_ref": "indicator--0cb7ca09-c4d1-467f-8cde-e279d897d33f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869162a7-34e4-4973-9e8f-d36dc038a3e7", "sighting_of_ref": "indicator--534ea2bc-0f2b-4ce8-ba3b-06332098fb3c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9512188-3666-49b4-a392-cea59ac724f1", "sighting_of_ref": "indicator--885c5098-e5c2-4d39-a66d-5faf6bd5e525", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f840c78b-f5a8-49c0-bc4b-e4f7b15e390d", "sighting_of_ref": "indicator--23dd896e-2161-40af-8c66-39bf295b7396", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759ee478-681f-400a-8cf2-e710527383f7", "sighting_of_ref": "indicator--cc99f73f-6e90-4112-9fd2-39026ad8bff7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aeb69da-4985-4a9d-8cfd-e7e56e12d5fa", "sighting_of_ref": "indicator--c044d980-4b35-46b6-91c0-f704e4c09284", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4901725-8e96-4a57-ae3a-6320e685cc42", "sighting_of_ref": "indicator--4c04c480-c363-4524-a57e-aace0d788223", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccb399c-d4fc-49ac-9323-9197f430d10e", "sighting_of_ref": "indicator--fb149c57-a4d1-4450-8dd1-69b5fbae2d65", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e335f1ae-b786-4ba3-bbc5-57e5172ffada", "sighting_of_ref": "indicator--2e73c42e-85c3-4934-8c3b-21758ce043af", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1062e12-73f4-438a-a173-4741e3dbdbd0", "sighting_of_ref": "indicator--a9a5ed46-cca1-486b-ad54-0dac9020c2ef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac2533b-54a6-4f66-8486-e4cf42e7d770", "sighting_of_ref": "indicator--dc2b8e42-d462-497c-aabe-38b8c8e3e726", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b839719c-44fb-4b6f-a257-e342812ba841", "sighting_of_ref": "indicator--d4b84b3f-702a-4f16-88a0-089eb9b8f73d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fb9c5d-ca42-4e8f-b6e7-b92fb8e8e7c1", "sighting_of_ref": "indicator--e79df854-cd1e-49b9-bbd6-4e445c77f44e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa486e9f-e353-4bf1-b6e0-57127666a063", "sighting_of_ref": "indicator--290780b5-1a49-4800-aafd-71afd927a4ed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b6c19d-8dec-468b-8e6f-4548ed565ec9", "sighting_of_ref": "indicator--d3f08c2b-05cc-44d3-8eca-7d43f85b6517", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a98c15d-6d85-46ee-b549-41bef182cc6d", "sighting_of_ref": "indicator--285b2e7d-b875-414f-b6e6-9a368ebe427d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc98f0e-c8a1-43cf-85c7-f6ef367cfcd8", "sighting_of_ref": "indicator--97353ff8-d604-4b20-b22f-51f276343589", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb334025-af00-4d1c-80b1-b46067162cb5", "sighting_of_ref": "indicator--b63662a1-878e-4bd4-8a00-382767787bd7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57951f31-147c-433a-b164-bd977e4260ff", "sighting_of_ref": "indicator--141a98b9-7f84-4996-9f51-30915793b49b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3730bfd8-da52-4ad3-97e9-8730d9b15d30", "sighting_of_ref": "indicator--84190d5d-2779-4191-8b3f-dff3e1288bf9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd80e36-f836-4642-a2ba-7838cea4af47", "sighting_of_ref": "indicator--f33a963b-4d84-49ec-9ada-c28be5237e58", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9331ee73-f9f8-4f07-bc78-c0122025ba82", "sighting_of_ref": "indicator--d4fc0ba2-3c50-4dfd-96fd-60c5bd4092d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722ee2a1-4ba3-4a9a-a1de-44669fc8a2e2", "sighting_of_ref": "indicator--f97ab225-02af-4cfe-a597-e5881d7719f2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfa7350-3d0a-4422-8c49-02990edc3b89", "sighting_of_ref": "indicator--664e2861-ec47-4290-bbbe-a71a1e842186", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7f0a3e-66e9-4783-97ed-9eda8e016d03", "sighting_of_ref": "indicator--c1443f4d-a6e8-456a-9d85-4836ebb3be65", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bb7da4-59fb-431d-9f42-21d9060efa68", "sighting_of_ref": "indicator--027a1290-2c25-42c4-89f0-085277601c5f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0be3ed-c51c-4b36-9fab-687ccff136ce", "sighting_of_ref": "indicator--5908db9d-adae-44b4-989a-44d043d2e26a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb941b50-ade7-4ed7-b199-68c6945b2cf4", "sighting_of_ref": "indicator--029d032b-34d0-4440-82ec-02a7343f88a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d3112d-93d0-44dc-9045-d1fa280b6adc", "sighting_of_ref": "indicator--abe6ce6e-c398-4363-96d9-9ecf2f603496", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39eb42c8-da45-46c7-9075-f8774b3211cd", "sighting_of_ref": "indicator--93a22658-fd45-4a40-abb8-7013b795ad51", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2858ad-6b73-4ba1-8cc9-e3af2750acbf", "sighting_of_ref": "indicator--94f14049-ccca-4987-9b90-a807c60a5ead", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87224e1d-2031-49ab-8b9a-f2b5709bb262", "sighting_of_ref": "indicator--b77d4e75-ab00-4204-ac7f-c7f213e5a5f7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff27d49-478f-45ff-95a6-b4ed6cb9008c", "sighting_of_ref": "indicator--ed246ad5-1c1c-407f-8c12-caee2910dfa3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7365606b-7b70-4616-9542-6553c9ac7a6c", "sighting_of_ref": "indicator--51b422ee-642e-4cf3-957d-e3f9372cde5f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef4a110-655f-4aa2-ab3a-987cf4cbaa4a", "sighting_of_ref": "indicator--5470015e-43b6-4d09-8421-24804909914a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bb5920-2ea8-4c07-a973-f0e6b179bdb4", "sighting_of_ref": "indicator--76e531b6-4d67-4fd9-8abf-379166da64f9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f02df03-425b-458e-8e87-c0f3cce4b14e", "sighting_of_ref": "indicator--c1262cd0-380f-40ab-9eeb-28aecbbd1f57", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2040c656-5466-4a21-9540-0501639f3409", "sighting_of_ref": "indicator--bac79102-924a-4b4e-acbb-f929534ac03e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa6d5ee-542e-4c3d-9d87-580172c9a2f6", "sighting_of_ref": "indicator--968c2854-95e6-4622-9055-d5d35c5ac447", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b17cf40-fe81-4a91-aaec-c84337cc4e1d", "sighting_of_ref": "indicator--9bed8b2e-3c36-42f8-8edf-1ed384023878", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7487f1ac-9ebc-4eda-b5a0-951f8c91f7eb", "sighting_of_ref": "indicator--dc4f98d0-b71b-435d-ad8a-30909182f298", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ac6481-562c-4d8f-ae23-d0ba8d5df49c", "sighting_of_ref": "indicator--e3a6bf8e-23b9-4f82-83fc-dba9d399b61d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffb5cda-3c4d-40a6-8864-457c5020b4e6", "sighting_of_ref": "indicator--c1f10ca2-5c43-4226-865a-9c1d9090e38e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b8d333-a3af-4f01-9296-7212c2db5660", "sighting_of_ref": "indicator--d82ae391-19ef-4d65-8c7e-32e2d3235510", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250e73e8-27cf-4e49-9a34-02a610a157a6", "sighting_of_ref": "indicator--adbccc5c-81ed-4c08-88ac-0c18c991f1f9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60f2458-25b9-4e4a-af9a-805adbd06d2d", "sighting_of_ref": "indicator--fefeddac-6ae2-4177-bdc3-9e2190154b79", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44784dc-b8bb-4b41-993c-7c555f9cfd3c", "sighting_of_ref": "indicator--449fbfe6-107d-4b9e-b533-ccd53749cb4f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8715e62-ce71-427b-a793-a777fd487973", "sighting_of_ref": "indicator--0fc218ac-8550-454f-a0bc-6bb2c1ae62aa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0d20af-fe51-425c-b3fb-f55a6589dcda", "sighting_of_ref": "indicator--1bde1c27-47b4-481d-bf07-9848448f9059", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437dd7e6-1ba7-4992-94ab-227419c26ceb", "sighting_of_ref": "indicator--fbc108e1-50ae-465a-9d83-f4db7b98ed67", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a356d8c1-353a-4bb4-9630-36711aa72a8c", "sighting_of_ref": "indicator--14ec1bc5-162f-41f2-acbb-99068ec82169", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd29bc69-e8b3-4c5b-a63d-ddc2819831e1", "sighting_of_ref": "indicator--5e7ff31d-1ea8-4e9a-82eb-74b995d109f9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d2528a-6f3c-4e86-886e-b63d391c1db0", "sighting_of_ref": "indicator--09fafe23-4269-4227-b7f8-7efd69a4d333", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5033ef9a-58b4-465a-8280-eb56b978654e", "sighting_of_ref": "indicator--eb53cef7-a8fc-4afd-82cd-0ba9c0bb6150", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8076de-e232-44a6-a0df-7b7a4add53d6", "sighting_of_ref": "indicator--d91de8c8-51a2-4563-8892-b974fc0ed9a0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0666ff-b841-4fa3-953f-998e9f371405", "sighting_of_ref": "indicator--8c3f6c6d-8450-4299-937b-444432f7ab22", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b519b0c0-c448-4783-bcd4-131cf7a8c9d8", "sighting_of_ref": "indicator--ccaa2082-17c3-4d26-bf20-f2c135493667", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8762cbe7-8be5-43b6-a01f-c4475b0e7774", "sighting_of_ref": "indicator--a156edb5-c931-49a3-906a-3c1e7423ddda", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502dd519-5e2c-420d-815d-30931df7b5a2", "sighting_of_ref": "indicator--bbd1197b-4729-4fb2-923a-f6a06d43e8c6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6c527d-7926-4bb6-a325-6b76bc9b338e", "sighting_of_ref": "indicator--d41e5ccb-0a66-472d-8e13-2e21f729bc57", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956d5c5c-7cb3-46d8-935e-0a93f0540744", "sighting_of_ref": "indicator--b2b51af6-f1dd-4d41-8034-797da16ef227", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbfd1b2-a3a9-479c-ac29-7a4aa9d860be", "sighting_of_ref": "indicator--261a4d37-0dd8-4167-a38e-1ca39bdd51a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b673f26-8853-4aa1-a8d4-ca8a63f3ed53", "sighting_of_ref": "indicator--09d06adf-de0c-4d90-ad18-247b526a0923", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50f94df-9d7d-40c1-ae8a-1561d2e02b97", "sighting_of_ref": "indicator--16b16b3f-7e10-45a3-9e13-e5ae34b61790", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bccd604-fab4-4d23-a286-25e213500a26", "sighting_of_ref": "indicator--31006281-220d-48b9-b616-c4bd94953be1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5737d0-bcdc-486a-8c92-e11b6453828c", "sighting_of_ref": "indicator--e304f410-12a1-470b-a321-280b3d275af8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f82c04-3c28-4aff-975d-445007c81258", "sighting_of_ref": "indicator--2610a03a-32e9-4ad3-b3ee-4de98fd5e16d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcf66fe-70c7-4304-8905-9df27b316c17", "sighting_of_ref": "indicator--a9bf217d-43a1-4ec2-9aa0-8f0856988009", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214a01c6-d0c6-4b76-852d-d24c64e2ee6d", "sighting_of_ref": "indicator--ebc420ff-66a2-4160-8fdd-8a8768971c79", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d378147-b0d2-490e-8797-40293d95ba86", "sighting_of_ref": "indicator--da137f58-6892-46bc-8a64-cd12ff5172c4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f33df6-56f9-42a7-8884-87038a22df90", "sighting_of_ref": "indicator--7853e704-4f79-4680-9e1e-ae79e444c9f4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8854a7d9-c1cb-4d6d-82aa-b44dce34f969", "sighting_of_ref": "indicator--3c9f9a4c-1a1e-470f-a36e-29aaa9e75066", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03bee7ee-af9a-4561-ad17-df6515e48494", "sighting_of_ref": "indicator--6c3d8924-001a-46a8-bd41-983b0da6b436", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca55b712-10b6-4cb7-889a-97eff691b8ae", "sighting_of_ref": "indicator--d3f13f6c-5279-4b73-a6ef-6c14ba993bfa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11508112-55ef-49da-ae56-ebac121689ba", "sighting_of_ref": "indicator--7a4c7cb6-9fd0-4aa6-a635-e2643e693788", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4659a14f-cd78-4cc9-885b-cf22001dad1d", "sighting_of_ref": "indicator--93b6b9b3-be1d-4373-b319-94890b2c8c22", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cd29d1-dc6d-4cb4-9422-5ccb320bded3", "sighting_of_ref": "indicator--a27b38d3-f95e-4e15-9e35-00494e26b8ee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06481841-4dce-4bdc-afac-22331bc314a2", "sighting_of_ref": "indicator--59d9d110-37f2-4447-9344-2cb579ce017f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae26d483-86a3-4584-b6dc-27adc24d91d9", "sighting_of_ref": "indicator--397808ef-a280-4fbf-80fd-4ac99f5fa2dd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d23173-7596-4d2e-a8ea-d57c3c25cb2a", "sighting_of_ref": "indicator--f7571405-3f40-4097-bbb2-6db8f52b65b4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf85452-2222-45a6-8f5d-bff94fce134d", "sighting_of_ref": "indicator--ce0c20aa-d84a-491d-9a32-51fa237f1ccf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214694a0-4133-44a1-919a-ae692c2a3ed0", "sighting_of_ref": "indicator--5a4b17ee-975a-4088-9766-8983151c854d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f18d233-cd0b-419a-a919-802d0683603a", "sighting_of_ref": "indicator--f3e000bf-5630-46be-a517-3f66547fea85", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8a2930-322a-43f3-9bea-8a9f4917ba37", "sighting_of_ref": "indicator--27e2e7c5-2e62-425a-8110-8558a92e588a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fc3afc-9455-4307-8ed8-79537bf956fa", "sighting_of_ref": "indicator--afbc3eaa-9586-491f-aa6c-fcd198a628f2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91680b7d-94d2-4580-8081-f1f34a1d5c92", "sighting_of_ref": "indicator--7ae8d9e4-3714-4bb5-a4b6-0a6b86a90492", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386f1e3f-a0b0-4466-b7ee-ef1c1e23c080", "sighting_of_ref": "indicator--ffb20625-3f68-48ec-b713-d557b9266cb1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7baabd58-36f7-438d-9d0f-e19a3106711e", "sighting_of_ref": "indicator--23194056-ffc8-4377-ae4d-a2c5ee224202", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b9afba-127f-4f94-ad02-e9a79d5a200a", "sighting_of_ref": "indicator--a6d867ca-c804-45b4-a9c3-ffbc78d0d56c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3365f019-3633-4773-8d94-18aea16bfc89", "sighting_of_ref": "indicator--ce89a1cf-22c9-43de-b69e-ed10d56701ce", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5202222e-209e-4298-8ae9-319f1c6cc667", "sighting_of_ref": "indicator--91e69834-652a-4618-9aa5-26c0c587da94", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b088e1-1e2e-428e-8d98-6106e89e23ac", "sighting_of_ref": "indicator--7093a9ac-74b3-4665-9473-124cf9cf2f07", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9426a3bc-4e98-4cd8-a9ec-1618d3d35299", "sighting_of_ref": "indicator--c2276dfb-d3b6-4946-8cfd-5fa6b80bce42", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7697d1-dab5-4ca4-83e1-b5fdcd762ab6", "sighting_of_ref": "indicator--2323dfc0-b725-4799-a0b9-c28f75e24dd2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f56417-2e1e-42a2-9574-a3597fec1841", "sighting_of_ref": "indicator--7a05b6a9-eb00-4a40-9703-6f7bd8ccc898", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb78993-ebff-4623-9bb3-1603e16d8e85", "sighting_of_ref": "indicator--e8020a35-1138-4883-8de8-c1e11f0a5b9d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076515b8-7502-4259-acc0-4308be0d34dc", "sighting_of_ref": "indicator--895f3248-22bf-4094-bfae-e4163075f8ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84df7c31-e152-4d92-9e2a-ca040f64d9f2", "sighting_of_ref": "indicator--806e6296-e15d-485a-939d-ee7052268780", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21188433-4312-466f-ae53-fa9881d462e4", "sighting_of_ref": "indicator--e6dc60ba-41dc-4be3-8449-2a4f3a639ffc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6115a746-e613-44ec-9d76-6ca9b48e49d9", "sighting_of_ref": "indicator--54e0c8e2-1d07-4af3-b9c4-e22004c0e923", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1520720b-01c8-4f30-95ec-7dd8501546f6", "sighting_of_ref": "indicator--68a6082e-a7b4-4902-827d-509b9c3c7d60", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fd9626-6397-4743-874a-8a1e1b04dec7", "sighting_of_ref": "indicator--d29abbb4-c9dd-48b9-8750-e4b48eb2ae9d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7747d910-9812-4e20-9440-d38fb9bd0e01", "sighting_of_ref": "indicator--5187ad50-5bca-419c-9a92-065d75766a37", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26471e8d-595e-4b8e-b33f-544c98d831e6", "sighting_of_ref": "indicator--b9ae4eef-dc2f-42c8-82a1-9446f1bdcae4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f096d68e-e924-4061-93ea-a479553e9b71", "sighting_of_ref": "indicator--781c3784-b11c-493b-9d2a-1dcdf8858690", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b2c88f-886b-4425-a46d-c83c09b43798", "sighting_of_ref": "indicator--9a65d658-ee15-48dd-9107-6f9ecbd61b02", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7dfc442-e4b5-4282-aa31-86a6199ffc2b", "sighting_of_ref": "indicator--53a08f1f-ec2d-4150-9c2f-f86ce2939555", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d491a1-ad62-4be8-91b0-bc202fcd3ed9", "sighting_of_ref": "indicator--f69324cd-e12b-4057-b21f-6d015e2de9cd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a90f1a1-a8f3-4075-bdcc-5c1de7a44586", "sighting_of_ref": "indicator--9d9832a3-5fea-4c76-9515-af441a3150c7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9eb5c1-0dd4-48e6-b549-9ec23e53fb87", "sighting_of_ref": "indicator--b36278c9-5d24-46cd-a716-30ee01821c7d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49003dd4-d7fa-4a39-88ed-7ee74e7a19c0", "sighting_of_ref": "indicator--cbb9b3e5-7bfb-4380-9e63-aac83f6ec832", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7957060-7579-4a23-9c34-cc3a9133c1aa", "sighting_of_ref": "indicator--0fb35392-ba8e-46c7-a259-54c85d3478a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854e77a2-abff-4125-9224-1d0a0a37d126", "sighting_of_ref": "indicator--07827e6e-69fe-470e-bc2e-dfc5aa01758f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9ac1f5-617f-40bb-ac84-036fe4af9802", "sighting_of_ref": "indicator--058a754a-4c90-451e-8925-741742846fef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043df1e9-f78a-4e3c-be0b-8aa445039b8a", "sighting_of_ref": "indicator--14d84639-d99c-458d-892d-60830dbd17c3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc61dbc-b7e7-4a73-9189-f064ac7a32c6", "sighting_of_ref": "indicator--e3635188-3a13-4627-b3fe-4bca79eb00a5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff84fb2c-eb1e-4b31-b4d2-c151e4019a7b", "sighting_of_ref": "indicator--7fee67c4-f2fc-4e0c-b25b-d9ca0b7ca448", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c92177-90ba-4635-8bfc-f1db1342303e", "sighting_of_ref": "indicator--a1ce7865-4eaf-4fe6-92d1-c710aa2b651e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086fd162-a9c5-4c22-8dd0-1a2a36283b05", "sighting_of_ref": "indicator--7422bb59-6046-41b1-b0f5-12e8706f9003", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bc1f46-c5ba-483f-8ce1-1d376307f323", "sighting_of_ref": "indicator--c5562a31-e5c3-4384-a7ff-74ccb04f728b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef05b006-40d5-432b-8ff8-cdd616c767cf", "sighting_of_ref": "indicator--939e3401-2afc-42b9-9deb-aeca6b06a855", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9deda92b-f06a-47ed-a15e-76b86d84a1d6", "sighting_of_ref": "indicator--e30c8904-fa29-4051-a093-fe5657a1e965", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830cb2e5-da9b-4b37-9bbf-21741c7e3dd2", "sighting_of_ref": "indicator--37391854-72b7-48a5-90fc-8d7103548139", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316ca646-1f15-45a8-a847-741d6656ae9f", "sighting_of_ref": "indicator--195c8fd4-7be5-4592-8f93-13f9f63ebd38", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed10c2b8-0ac3-4c52-a74b-da62929eec06", "sighting_of_ref": "indicator--e63c4d79-e25d-49b1-8e1e-018c752eb37f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0994bfc5-4614-411f-838d-4112c0aaf4c1", "sighting_of_ref": "indicator--70e0f87b-d820-42a1-a232-3d41bb7c0999", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d193493a-d652-44c3-8d76-22101be63ffe", "sighting_of_ref": "indicator--4a1ec94b-efba-423a-9dfc-1d000d12bb47", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390d0092-7500-45d5-977d-e7f5729bcdf6", "sighting_of_ref": "indicator--1fe83147-8b3e-44da-bc7a-f0bfd9d7cc84", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc09f0b-2d45-4265-94a1-65803a367871", "sighting_of_ref": "indicator--562d5479-df6f-4ddf-ac54-3948c8f793bb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480987df-5b15-4a3a-8753-a0f10ec8fa88", "sighting_of_ref": "indicator--4da01cb4-b120-4783-b9c2-8e399e9cf301", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12c7219-9509-4aeb-9b08-1c799ae77492", "sighting_of_ref": "indicator--4c4e8f8a-730c-4ca0-affb-04e6f07ce79c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145b1dd1-a202-45e4-bafe-9107c4ec1c84", "sighting_of_ref": "indicator--f9288428-baad-41d6-8345-8e3dc61a093b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f66e1a-d4d2-4e76-8f34-9c68baa5da74", "sighting_of_ref": "indicator--7deab8b5-521d-4489-a949-f20ef5a2f1bd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d9f16d-e624-4d70-9e49-0967bcd75f7d", "sighting_of_ref": "indicator--5fcfd150-bed8-45b5-a25f-1a4154e18595", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725c3877-e948-4145-bb59-221e435f1210", "sighting_of_ref": "indicator--44159c43-404d-4142-b241-713962628027", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df3a983-1acf-40b7-937b-c7a0418db40e", "sighting_of_ref": "indicator--f1fba289-be0e-4a41-826d-bacdf5ed5f0d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736dd5bd-b3aa-44b4-87bf-952294f1c5df", "sighting_of_ref": "indicator--e4a7c632-d2b1-43b2-81c0-e7d23a4f0481", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a261aee-a987-4de0-9e5b-2c5f2ebd351d", "sighting_of_ref": "indicator--fe90eefd-e668-4ef3-8ce0-f998ff4a3cb5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c36486b-073f-4b4c-b222-b3324a840f5f", "sighting_of_ref": "indicator--72c7663f-6476-4a81-99a0-67e247eec77a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de847b8c-c7c8-4e27-b573-0bb17d109372", "sighting_of_ref": "indicator--dc75b9fa-3c77-4857-b853-671e2af7c535", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e57fb0d-79fb-4c8f-bd2b-c0c57ad6279f", "sighting_of_ref": "indicator--2e392b6e-ea52-4da0-9450-1519a4992645", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29c1164-6b92-468c-bec6-64517c2bd386", "sighting_of_ref": "indicator--179f2956-9003-41ab-87fe-e9096794606b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5129e2d1-d53a-4f42-84e9-05d8b92cab26", "sighting_of_ref": "indicator--a6a3932f-cdb2-4e0a-9c46-fc73d61bf3f1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ad5cdd-044b-4411-873f-a9210c0ee711", "sighting_of_ref": "indicator--c4750fbb-d8d3-4eb7-9028-626eb74f8ece", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ab6d4a-8061-4c31-9831-5fbc74283b4b", "sighting_of_ref": "indicator--89183704-82b6-4439-b4f2-05de92215ebd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd11b027-e789-4aa8-9003-26dbd4264078", "sighting_of_ref": "indicator--d2211c79-fbb3-48ab-87ea-ff83a97dd66e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8465520e-1f24-4872-934e-3e6e5a43de4e", "sighting_of_ref": "indicator--64c73e54-8c8b-4f62-859b-20219138f967", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e60c41-e61b-4481-ab5a-5e8e650d9ca5", "sighting_of_ref": "indicator--9c97ee53-48d3-4d4b-ac9f-26b41a3d5b75", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9bbc1a-1826-42ee-bf44-3485b10cb4f8", "sighting_of_ref": "indicator--49bef96f-4d15-4859-bc1a-2c80f5385ed3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae55a74-ca4a-4e5e-9a06-e3453eb9f819", "sighting_of_ref": "indicator--b506ea4b-2f78-48fc-8508-cb9c32d0b56c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf85f246-c12f-49eb-8c54-32faf2bb8203", "sighting_of_ref": "indicator--4fe10db7-d922-4e07-93df-8574012331ff", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae74698-fb8d-4d2c-8280-af8f02cda03d", "sighting_of_ref": "indicator--b870d49e-e958-49f3-bf7a-28e001de2800", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73d2921-6826-402a-8fd4-0d233eaae9a5", "sighting_of_ref": "indicator--a62dc63c-a4de-498a-a02e-e6bd9cce34c4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b09b892-13c1-4695-940f-b90dbab12c1a", "sighting_of_ref": "indicator--5fb1ddf8-74df-4317-8832-5e6b9c15b057", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdba92d4-389a-4274-9691-1035e9abab5a", "sighting_of_ref": "indicator--a2a9bc6c-1dde-4ef1-a2e4-acd5821c1a43", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc49b2ad-9f3c-4322-a666-7e6db7eaf457", "sighting_of_ref": "indicator--104177e9-2db0-4bf9-bc5d-b8579bfadc82", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f94b491-1040-49e9-a1ac-4c9369aa8293", "sighting_of_ref": "indicator--07c8d959-f93d-427c-9501-d2f3a538949e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd5ccaa-f334-4059-8c5c-e22783a0aa75", "sighting_of_ref": "indicator--0bee4f05-fbfe-4716-97b4-9fa00b724a1b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66668e28-1521-454c-b11c-403f7b08794b", "sighting_of_ref": "indicator--984ff1f2-7464-46a9-8140-badbdc9a4af3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b64af2-81f5-48d6-b38a-fffc5806764f", "sighting_of_ref": "indicator--f7a72bf7-f263-4d52-9c2e-993b105a2791", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2792d7-a6ee-4a99-b93f-fcb50bf0379d", "sighting_of_ref": "indicator--dc7bcd57-9fc3-4ab1-80ed-d1d9ac65ec08", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b979a7-5f83-4430-a699-959d57eb27e0", "sighting_of_ref": "indicator--f757883b-38b4-4f76-bc26-eb3aaa39111e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84586ad7-de75-4fcf-85a3-caed4edfd86a", "sighting_of_ref": "indicator--8dac33b1-cbbc-4ba3-b45e-f55dc1eb25cb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6fe9bd-57fa-4b30-b8af-5b16214d5f21", "sighting_of_ref": "indicator--e8c2b866-6c43-4ea7-93f1-496a107cfa5d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1899a5-77c4-45db-9b21-eae058547684", "sighting_of_ref": "indicator--a2d7a8da-8d25-4b59-9d0c-09a744fde4f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8510b04-4202-493d-ab1e-5852158ca4a7", "sighting_of_ref": "indicator--943ac336-c0da-431f-9ddf-c7003d4b6482", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613fc20a-b5bb-45f7-930e-47b0f8022a9b", "sighting_of_ref": "indicator--7bd8948a-b333-4075-bc8e-f3898ce9b9ac", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea74026-e06e-4a13-8e9e-e9605261b734", "sighting_of_ref": "indicator--508104b2-84c9-4d8f-a51f-03d1e99aa119", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da7bdcd-e01c-4139-a088-795d932d3152", "sighting_of_ref": "indicator--9c577b7f-8979-482e-9eb4-f690a2590880", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8b6f4f-0b4f-409b-932f-dfa412667a52", "sighting_of_ref": "indicator--09197ba9-5247-44a5-951e-2a858df8f2d9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a630fb9-b57f-4ee7-b6cd-d60239df617c", "sighting_of_ref": "indicator--ebd722f1-ae48-4bcf-bd6c-755fbf209753", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1d88b1-e634-4aaf-8b3b-e4d3cf8e52cb", "sighting_of_ref": "indicator--1e237bca-b22f-4636-bfb4-896376c3f7bb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d071043-f87c-4ffc-b788-1a9ab2e111f4", "sighting_of_ref": "indicator--6bb67731-eaa4-4964-bc2c-d6ad67d2af6d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11231333-7b4a-492b-acac-148e0a58ce25", "sighting_of_ref": "indicator--3c1f8835-263a-4169-a47e-8e7e46302945", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f13cce9-0e4a-4267-963b-5207095f0a35", "sighting_of_ref": "indicator--db22dfbc-e5ce-4998-90aa-68bb4fdae5fa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fde7b1-f740-4450-84e8-d66b54fcc5da", "sighting_of_ref": "indicator--a914903a-e32b-4d41-a56a-9a3c266bbafc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92a0b70-843a-46c5-8228-5a24b3756634", "sighting_of_ref": "indicator--addb7acc-077c-40c3-bfb2-2c982f656973", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da4a695-50e3-441e-aa88-e0dfdc0576b0", "sighting_of_ref": "indicator--d6b5671b-e6fd-47bb-be00-2c7406e71b27", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608fb013-7977-44d8-bc66-28eb83b3af9a", "sighting_of_ref": "indicator--6434e45c-0c27-4918-b2c7-29e6fa1fee1d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b75a41-4ef8-4132-bb5b-ab770bc617c0", "sighting_of_ref": "indicator--5a11e8c3-9bd2-4b47-a5f7-78201efb3acd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8f4637-61b6-4843-be9c-46562855d7a0", "sighting_of_ref": "indicator--b6d0d1f8-f80b-4c8b-ac54-d7ac39df2b15", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a43c64-a497-4f87-85b3-c81764ee94e0", "sighting_of_ref": "indicator--346f73e1-31c8-4ee1-b766-8f9358133f7f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de4cbae-9830-4d26-a241-7b7b0f344981", "sighting_of_ref": "indicator--5483c11e-9e27-47b1-986e-e3e1421fbf66", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba185af-0a49-477e-b47c-27f40ec77bc8", "sighting_of_ref": "indicator--5483c11e-9e27-47b1-986e-e3e1421fbf66", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d298500a-29df-48cb-8806-74cdec154081", "sighting_of_ref": "indicator--c89511ef-5a0a-4b74-a4c5-ecbbe32c4d53", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1cd195-2ab2-4b59-a4ae-847fb6432f73", "sighting_of_ref": "indicator--b91bcae2-37c1-4a4f-8a4e-55c8564a4f37", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9cee6f-a26c-4e61-ab11-2c0fb8245ebe", "sighting_of_ref": "indicator--7a775d7c-7469-4703-b987-349bd41ecc5b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8875579-05fb-4aa1-9a0c-cf9a5763896a", "sighting_of_ref": "indicator--554af8b4-912d-4d53-8ca5-666fb0ac0572", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e1b592-5b9d-4ecf-9533-bcfccf2a883f", "sighting_of_ref": "indicator--1acc04c6-84f0-413e-8ea5-ca183564f743", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484fb0e5-5c06-4ebb-800e-7b8325e7d081", "sighting_of_ref": "indicator--603eeee5-9d62-4dd2-9663-a9ba04b86717", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bac643d-deff-4d86-b90a-edf334ccc8c7", "sighting_of_ref": "indicator--7a23a05f-184a-4508-bc9d-10165b75d48c", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f64804-67f3-4109-a1d5-0d1f7234e9cb", "sighting_of_ref": "indicator--553ea5b3-f5ab-4a0f-a562-5079bffe11a1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840aa828-7d9d-44df-b1cc-4c944e6a2df9", "sighting_of_ref": "indicator--47819956-58cf-4600-ad88-332de6295a05", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317b7b8a-64a8-4c57-9d32-5e94151fbe4d", "sighting_of_ref": "indicator--09a5f215-bbe4-4036-8068-b54991b438e8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a98e975-39dc-4686-80a7-99c6cbac84ec", "sighting_of_ref": "indicator--c844cb49-ed43-43d7-a185-4e5dfb970b63", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798ae052-37a2-4cd5-8fa1-0186508ea3f0", "sighting_of_ref": "indicator--a1152b7f-7c11-4bbe-828a-e339a6e0be28", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b9a904-73e8-4b3b-abe2-2f81ce0ca174", "sighting_of_ref": "indicator--6b64f3b3-500f-4121-9ea3-c73e207688e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58df7f0-2186-47a5-9308-f357e2bf6f3e", "sighting_of_ref": "indicator--69d0f153-e626-4a54-b72c-3b57c2693dbf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc65a07-f9dd-4eaa-b94a-6def34017ccc", "sighting_of_ref": "indicator--6efb2b18-41a3-4065-971e-160136c4dbe4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26143c88-9011-4317-beba-9cc4b9988e9f", "sighting_of_ref": "indicator--583fb7c5-e39f-468d-aba6-ff67ff288f3f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7eb37d8-49db-4db2-ac3a-c3ef5570c069", "sighting_of_ref": "indicator--72ae8da2-6701-418a-992d-1f0d89cf02e0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74615307-fa5f-4a5d-82a8-81e0e2f50db8", "sighting_of_ref": "indicator--c181dcc8-84b7-4403-9a40-bb6cf4bdaa5a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef6ee82-903c-4983-afb7-7006c99ef7f8", "sighting_of_ref": "indicator--68514502-ee8f-4957-90a1-50b4925efd1b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139cc317-8a03-4afc-a11d-b6801ebef949", "sighting_of_ref": "indicator--a30a0941-3349-48d1-ba26-f451e7f64a95", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b950715-310e-4cde-ba9a-036be7447564", "sighting_of_ref": "indicator--35ff592f-bdad-4ee7-a767-d96f5db4e981", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3221438-49fa-4647-9f77-8a2fd406530a", "sighting_of_ref": "indicator--8c738df8-3fdb-4c23-b469-1eff4a8b781c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e96f66-0144-43bc-826a-76fb1df820fc", "sighting_of_ref": "indicator--a8b99708-b1fb-459e-814e-d019019cd3e2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438bcb8d-6d97-437c-921d-beb4854c008c", "sighting_of_ref": "indicator--dad452d1-5744-4c36-841f-52aed606ad1a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0903fd9c-aa55-48ec-9b76-6e4f81b4254b", "sighting_of_ref": "indicator--c9707812-2845-48bc-ac52-ce956c04643d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976407d3-2a49-443c-af22-fa681315a90a", "sighting_of_ref": "indicator--3be37461-fcf7-4918-ae6a-94728443d5e2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21d42ac-302e-4b68-a2b4-c943017e7aa8", "sighting_of_ref": "indicator--6016d803-c93e-41f5-9d05-315b9f42a195", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef327463-5dad-4297-b10f-3834754b401a", "sighting_of_ref": "indicator--72edc964-23cc-490c-a7a8-f708962b3d23", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3c71d9-6b3d-4097-9d16-631ecdd79a9c", "sighting_of_ref": "indicator--62259c57-23ca-443c-b2fb-0d30e55bb438", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcf5edb-df7a-44e8-bc7e-c0ef3521030b", "sighting_of_ref": "indicator--36d3e500-fac9-4e59-bc94-c9f90b93870f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b99d6db-3d4c-4070-8f45-265d841694cb", "sighting_of_ref": "indicator--ef59ec5b-ad79-4b77-91bf-bf2ce120d16f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f227ef-d98d-48e5-952b-a2327e20550d", "sighting_of_ref": "indicator--2e4c3e17-ef48-4db8-8c00-b4fe9a4ae8c8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a2c4c9-a286-4ed3-b25a-b74191d300b1", "sighting_of_ref": "indicator--6f022652-83b1-48fc-aae8-9526fd9afca4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5252e7-ba68-47dd-996b-27ebcf165fc9", "sighting_of_ref": "indicator--5f60efe6-3789-4697-8dbb-91b2227f2863", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7b7009-3238-4795-8f85-ce06f3886ecc", "sighting_of_ref": "indicator--674a4f59-4675-41b8-969c-80f29fcc225f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d489974c-8fe4-4c4e-a2ac-d2d5b7d2c68a", "sighting_of_ref": "indicator--2dd36d3b-1b8b-431e-8e58-55b10bc16dcd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8fc8ab-27a6-44da-a8dd-b95c91b5b16c", "sighting_of_ref": "indicator--f8782fa0-2ec8-448a-8b6c-21cdb9e44dd3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe41ab32-c725-4a9e-9899-2dbab498deb0", "sighting_of_ref": "indicator--b60a83d8-44ff-4967-b4ab-72fafe4c1a03", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46475a21-2df1-45c0-9b0d-59fb1da04635", "sighting_of_ref": "indicator--7e93f274-b51c-4d32-8e40-9d1f06620a8f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf0d14a-d48d-42cb-9e67-8b0f28d788dd", "sighting_of_ref": "indicator--800bd01e-ba4b-4068-9256-4c8f92fdca87", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84e68bb-9820-482a-ad2d-abb793e3e67a", "sighting_of_ref": "indicator--9a81b114-6fbb-42b5-aa82-ac4a162f66e0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6054fb04-51bb-419e-bd23-065afc2b004f", "sighting_of_ref": "indicator--2d16e8a5-46c1-4a53-a19d-314c8a988a3f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4241924e-a387-4bdc-abec-848f1dcc4608", "sighting_of_ref": "indicator--5b4e7a1a-d8c6-4ac3-9611-0028266eed3d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76e5757-fcc5-4f19-9b38-b67193841bc5", "sighting_of_ref": "indicator--2bb5f72b-ad37-4b8f-b63c-8e6249cdb482", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8694506-c7b6-4d49-a773-5a10fe6ea3c2", "sighting_of_ref": "indicator--60ab2281-f6d7-43bb-805e-5eb09f90698e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39936cf-48b0-412e-b327-8a3e22329fc6", "sighting_of_ref": "indicator--10710e46-31bc-43aa-9d36-2d76ac0dea44", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1de0d0-cb79-4893-b010-244f09ab027a", "sighting_of_ref": "indicator--c5ba2fc9-0d85-46a0-bdb5-13f51554d095", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a24c9e-a5fb-4c37-b6d5-fd4128cba45f", "sighting_of_ref": "indicator--c1fc2160-c712-4ff1-aa89-879a1cb2207b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ced774e-7446-4ce6-a3dd-5cd0e0be1ee3", "sighting_of_ref": "indicator--1f8981ac-3adf-4afb-8d31-9bd96d9adbcb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33ab4f3-cb76-4824-bff5-0e38d4c25cf6", "sighting_of_ref": "indicator--90116dd6-4952-4755-a76e-3a8480cad90f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42506373-3c5c-4712-881b-bb9baca960a3", "sighting_of_ref": "indicator--99ffb262-96a2-4de7-8c20-f0ab0b4b90d2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c4e052-426c-4a91-a632-99411d21de53", "sighting_of_ref": "indicator--ff21a5c0-5147-48ac-9025-dbf3c29e515d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bb225c-4efd-4d9a-ae66-36170e76af8a", "sighting_of_ref": "indicator--12a571a2-f7d2-4c80-95d9-ce864ae7b4ee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db74373-8ce3-4de6-9c59-0135228a46fd", "sighting_of_ref": "indicator--7b399a73-f955-4571-8558-eec3c0c951c6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc182170-fc91-4d1f-8fa8-20ded6e9b0a5", "sighting_of_ref": "indicator--96f0fa27-8bfc-442b-9b1f-b6176fa77b7b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e423a300-954a-4ee4-a97c-37efe593f328", "sighting_of_ref": "indicator--d7e1ac6d-3a22-4e61-ab89-6b5190543455", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168810b1-e4c6-4a2f-bf11-c70e410d9943", "sighting_of_ref": "indicator--f86fa005-d665-4b8e-a383-2318403b56d1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbc05d2-d395-4e8c-a0de-33470cbf28f2", "sighting_of_ref": "indicator--69218ff6-06b7-4bc9-b700-cc618e09e5f0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44db7f83-4cd6-4811-bd43-7f531cf8d2d2", "sighting_of_ref": "indicator--8c3d23dc-108f-4bc2-b649-756a307e67b4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfd345d-419f-49f9-b1a1-7ab8185d0f48", "sighting_of_ref": "indicator--ccf01ee6-85d0-49d6-a424-64c1a0485ff2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2686b4b3-46c2-4f12-800a-7a2cc1ca0fa8", "sighting_of_ref": "indicator--ea09489a-4425-47ef-90b7-1fdc058c1cd1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8eb1bde-c29c-4534-b227-8121395517bc", "sighting_of_ref": "indicator--e4d1da0a-1ef5-4852-a630-c8051bd072df", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c70d7b-e681-468f-ae6d-4408817a9b14", "sighting_of_ref": "indicator--71e2cd12-6cde-4df2-aaf5-9fcba1ab1f82", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c2b700-6f18-4fd2-afbb-bce0a0d02acd", "sighting_of_ref": "indicator--ae72ba90-cc2d-4a2c-93fd-baab2657f144", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c239f3-0fc5-4859-88bd-47badd406d12", "sighting_of_ref": "indicator--0c1525ce-c941-47a6-93c2-3b19e4d96b10", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778d2625-2b24-4f7d-b84f-6be2d524e746", "sighting_of_ref": "indicator--d92d6977-0b4d-47a0-854b-c0042efccdac", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7324d7cd-073c-4b75-aad7-5dd48d8061f7", "sighting_of_ref": "indicator--fa17b5cd-700e-4a9e-920b-761c148136ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2e0ede-ddd3-416d-ae71-18a2aecb8e53", "sighting_of_ref": "indicator--5b26c411-1517-4b52-9a0c-be6ad16df550", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb647786-d061-4063-91ed-df796f69cf85", "sighting_of_ref": "indicator--76b0b550-217f-4864-9ebb-5322089dd7ef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db359e9e-1c70-407a-9947-c9343c931f03", "sighting_of_ref": "indicator--0c6a1393-7282-4741-807b-14c935d1ae8a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f44fb5d-bf34-40b0-94e0-cc9054e3b58f", "sighting_of_ref": "indicator--e015282b-825b-41f1-8cb3-ffce63dbc820", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86dcfef0-e708-47b2-a7a6-e1256287aaa9", "sighting_of_ref": "indicator--20a6ffbf-2f4d-4444-9e77-32bd638f2ed5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fed5b3b-9438-4143-adc9-d382f4804cc1", "sighting_of_ref": "indicator--303a5bfe-a824-44ab-83b6-63aaf4abc7cf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb00798-69c3-4bde-a8d3-b813f37f83bf", "sighting_of_ref": "indicator--fc6c15b5-5cfa-460d-a5d8-22bf9cbb05da", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c3712f-b714-41c6-8277-b09199ac57b4", "sighting_of_ref": "indicator--aee940c1-f152-48cb-895b-ea8fe48cc407", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08201a63-7aa3-4d59-9b4d-66bada30f5c1", "sighting_of_ref": "indicator--5262d58c-ee45-4717-8b76-c008cdfe34e0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97171b54-1ed6-480a-90fa-ee78c8d82a44", "sighting_of_ref": "indicator--9a4ba514-a5e9-4855-beb3-4f7a29b9502c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d45a9c1-d4b4-41b3-8f63-182fd8cba73e", "sighting_of_ref": "indicator--4c1780ec-c9d3-43b4-a0a9-e36d912920bf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca2502d-3ca6-4c84-97dd-3330230c69be", "sighting_of_ref": "indicator--f1cb073e-ab8a-4ee6-a160-f29ed0f2ccad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1980b47d-b37a-4d7d-b9c8-90d4daa7241d", "sighting_of_ref": "indicator--4973170b-adb4-4a8e-9844-47a82275c368", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67b14c0-6fe7-418f-9b4f-158b894842b5", "sighting_of_ref": "indicator--8e8727d1-a729-4fce-b141-949a1e933887", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62629e24-dff3-4ce9-a7ae-0e0ad3cf4ce4", "sighting_of_ref": "indicator--fdb7b73f-b152-4846-94d8-431180412ddb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8450996-339a-4587-98b6-10fbd8bbf40f", "sighting_of_ref": "indicator--363c9641-056c-461e-8f53-8cc7ae7c89b3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14ccb48-d125-4af6-96ab-fbdea8a2f3e7", "sighting_of_ref": "indicator--328b819b-7830-4b33-b77f-b5f977e76849", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ff40e1-f2be-4798-bcc9-e241db634dab", "sighting_of_ref": "indicator--44d87297-9c54-4f95-afa4-01bfd1ca22eb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc51135f-7382-41ef-a30e-29a34ac42d2f", "sighting_of_ref": "indicator--01022119-f4fc-4d0b-a2bf-b569b1d38c2f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa9fbe4-0d2f-4347-8ea6-e17f3527db35", "sighting_of_ref": "indicator--c8efb685-ed95-47a3-a827-0b37dc37c035", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5946e45-06b7-420a-8360-b929f16c9c02", "sighting_of_ref": "indicator--c93af945-093b-4774-8a98-89db01ca9ff0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67735f39-f4c8-4e51-8d76-7cf35a86b9ca", "sighting_of_ref": "indicator--dd478fc8-e4be-4184-a3b2-69c217d41df8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcc731d-7315-4c18-ac76-a272d0aac50c", "sighting_of_ref": "indicator--713c3384-8b50-4156-9d51-c4ddc8b813d8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf29dbe2-0081-4c4c-a963-426dc2f55122", "sighting_of_ref": "indicator--51f3fafa-79e2-4f25-bb23-dddf747f1062", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b8245f-844d-4bfa-b26d-6b69f713cba6", "sighting_of_ref": "indicator--6cf0c58c-86ee-4749-b5d0-74ad6e14e7b6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30336037-5e32-49f6-8393-b240b0360b7e", "sighting_of_ref": "indicator--72461d9b-e2ac-4215-a53a-6571b64f75d8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3e52db-2fb3-4bdb-869d-fe476fa29f87", "sighting_of_ref": "indicator--5b6d4a13-d32e-472e-b422-57e9250912ee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1dec84-6128-45fa-be0a-6bac92033d3a", "sighting_of_ref": "indicator--6b29a302-b42b-4c14-9cf1-aad5a04be271", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f62d04f-b7e5-486d-a35e-86ec2012fc87", "sighting_of_ref": "indicator--f2b0508c-eca9-44aa-aa7d-771712529b58", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead538b0-53cc-4b22-9a88-948067a4f047", "sighting_of_ref": "indicator--31b040cb-50b8-4648-a6f5-e38ffb678d68", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9820bae0-3c8a-401b-ba7e-2cf312de725d", "sighting_of_ref": "indicator--8d4cc476-33e2-44f0-8fe4-617791409c83", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35932e8b-ac06-4a96-8feb-edd28dc9571e", "sighting_of_ref": "indicator--2430a447-93f0-40fd-961a-a4d372016c17", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b17b92-dfe5-4cb1-b631-91e6905b2a0c", "sighting_of_ref": "indicator--6e922740-8877-4f88-b89e-4e41134e5993", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f2cf13-9118-48cb-aae9-4d742aba5959", "sighting_of_ref": "indicator--fb9ec3e0-9101-47d1-a671-20c01825bf34", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b664641-4392-4d15-b067-f883fc522683", "sighting_of_ref": "indicator--26f7878b-2419-447a-9958-28481d1d1d89", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a7ecc3-2efe-4ddf-8f77-91be68037613", "sighting_of_ref": "indicator--d5481ac5-856a-4d06-a349-c64faa1270f7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e27019f-7a51-4e9d-8e89-54017afc9e99", "sighting_of_ref": "indicator--b9616566-1e25-4d2e-9de7-342f5b25381d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137d57f2-a716-4270-a528-c62a0cc6b027", "sighting_of_ref": "indicator--67722671-9994-442e-b455-b14d1113a298", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ce95e2-7e1f-4d11-9d61-57aa3e47cf8b", "sighting_of_ref": "indicator--23c477c5-001c-4f44-9976-ff5dfd61ef8f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb54ebe-1a58-4f4a-b9fb-067d3d8c6f71", "sighting_of_ref": "indicator--4369c045-5c33-4cd7-a74d-35f3d87232fe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac6397f-dec0-49b8-b2ff-b1392784e684", "sighting_of_ref": "indicator--60aa20bd-1159-44c4-98bb-3c7d0a25bb63", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0dd008-ce53-4aca-9ed9-2a173ed1ee84", "sighting_of_ref": "indicator--9a951ee8-a3e8-4582-a963-5b50d16b3a38", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ca5478-53d6-47b7-ac7d-ca099e07c3f7", "sighting_of_ref": "indicator--409ec0fc-9475-4d29-b1da-9ea7b6ede9a7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65902857-2344-43ae-8983-3e2d1bbccdcb", "sighting_of_ref": "indicator--1dc15ce2-9dbd-4355-98f9-6dcc5e955fc3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab454c9f-53dd-4734-8f15-1cc4753b6431", "sighting_of_ref": "indicator--472954e0-27a3-45ab-9ff5-16617d296426", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f1b7f5-c116-43cb-839e-21abe2588a41", "sighting_of_ref": "indicator--83aadc67-4fbc-431d-ae2e-0d91d00d698b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a568bd54-77cc-4682-bb5b-62199dc28639", "sighting_of_ref": "indicator--cba5b13c-a3b7-4f4a-932e-bec24eb96c7f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ecdd54-40d5-4484-b82c-a977a8aa5bec", "sighting_of_ref": "indicator--7eeb3bf7-77f7-4377-9969-329486f4a1ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb7dbc8-af57-4d22-a4c5-df16c0318936", "sighting_of_ref": "indicator--8bb13d41-a479-4769-897a-970e71fc8058", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fac003e-f3bc-4ba6-87cb-39e9e454693a", "sighting_of_ref": "indicator--6b726978-b4ff-4b42-8495-faade25ac37a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e79619e-6696-4c8a-9010-d8b56c8d6921", "sighting_of_ref": "indicator--37557ad3-059e-49c9-bdba-65c3abd5f72a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b26374-0a2b-4c66-b00a-a72e06964fa8", "sighting_of_ref": "indicator--77660637-8152-4b73-b78b-840a75ce5f0a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80789a4-1969-47b9-b074-d54d68890541", "sighting_of_ref": "indicator--6f955f59-7294-4f9f-b4ba-459a1925780a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab97fa38-b180-4964-acde-b786c9fa0041", "sighting_of_ref": "indicator--7bf3ef48-4281-4dca-a2d7-a66cbdd1e930", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d2bf8b-b3f2-4b92-abac-b5ca1d8888e3", "sighting_of_ref": "indicator--88cc15c1-1ee9-48e5-9ce3-7ab0055ef8ac", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7851f945-7a7b-45d9-89c2-bea53374781a", "sighting_of_ref": "indicator--b43349de-c7ee-42a1-aeab-1d18d792fb68", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da444ae-311e-4df9-aed4-ffa75e9a17cb", "sighting_of_ref": "indicator--b5247e7c-cd22-44c3-9b79-5a011e384dc0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f360b17d-bd98-4af2-a8d9-5817aadafda2", "sighting_of_ref": "indicator--bdb839ad-b204-4280-a5a7-08bf9f81258f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952055fb-7eca-470c-ad3b-0de8421ee9e4", "sighting_of_ref": "indicator--fcebe935-6524-499c-bd1c-bf217e4f6457", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4c7dbc-0984-4328-9172-22ca9e318b05", "sighting_of_ref": "indicator--6edd4567-08d5-4fb4-965b-af9e0c3e0ae0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74bbcc5-9fc8-45e7-b50f-2034f65f5fdd", "sighting_of_ref": "indicator--02559068-fe7b-4b3d-9c73-b1c7bc298a5d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afd1ba6-2507-4b17-941a-157596b145cd", "sighting_of_ref": "indicator--6e90a761-cf74-45f3-be0d-0c19a6b3beef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6ec6de-06cf-4351-9f9a-ef65748344bd", "sighting_of_ref": "indicator--c3c7c48a-b0df-4a76-9f4a-ac698fa232a8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a111ea1-0327-4030-b19e-8da41dfefe25", "sighting_of_ref": "indicator--f5572581-2312-483b-bca8-ed481f2d8620", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbdde77-b7c8-4d23-b2a6-69e3e147bad8", "sighting_of_ref": "indicator--63857bbe-b264-45a1-b2e8-447d62b9be03", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225acdf6-dbd0-453d-bbe7-7befe17b79f5", "sighting_of_ref": "indicator--2f9fe971-aba8-4e89-b53d-b6868cf4c356", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b886e26-d4e3-4e5e-841f-8fb18c02f11b", "sighting_of_ref": "indicator--2f9fe971-aba8-4e89-b53d-b6868cf4c356", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e05aba-f1ae-44d3-90d0-a1d467684aaf", "sighting_of_ref": "indicator--2f9fe971-aba8-4e89-b53d-b6868cf4c356", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96be47c7-b419-4858-a1f0-7e7b74b9bf68", "sighting_of_ref": "indicator--f1fbd4e8-9455-4f76-a71c-ebe6b380ea50", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8323bba6-0b62-4401-bb18-cf452f94e01e", "sighting_of_ref": "indicator--ce4dbcf6-9e73-479a-a3bf-3a026145b669", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07492624-5a15-4a37-966d-719271520a0f", "sighting_of_ref": "indicator--87ea2e32-70a1-4be1-af73-7bee56a02f64", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b620cf-dab6-4fc5-a153-894d3a617446", "sighting_of_ref": "indicator--4b048757-6c82-4104-8373-3f17f6fd0820", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c42db2-a788-49f9-8fb6-4767cda52cb7", "sighting_of_ref": "indicator--f336f341-8fe5-44a4-a35f-751feaf2c3ec", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d567e1a3-c704-4b32-bded-7d2c8d40082d", "sighting_of_ref": "indicator--cb9ec86b-ff53-4ae7-8463-d63547810c96", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c464510-4336-4545-9d75-4fcf1d3dfae0", "sighting_of_ref": "indicator--0c47256b-d10e-4a5e-9ab7-3810f99bb034", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5d39d2-c243-430e-9e41-3138ce9a12fa", "sighting_of_ref": "indicator--c37cfd8d-ee2e-4d87-9f5d-9ee5e913f135", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cee441-9e83-4158-9d74-a7f4b2711871", "sighting_of_ref": "indicator--62556175-748a-4a95-9698-408713b9f31e", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c91f67-79f7-4ab9-8685-aa2326c8ae87", "sighting_of_ref": "indicator--c7a1fd90-87e9-4582-947f-525241416e71", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c5cbd7-e55c-4711-affa-9c6129e4bd53", "sighting_of_ref": "indicator--d3ab7219-4d53-4398-9bbf-ba3b32981f1d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e63435-00b9-43af-a679-4839026bf680", "sighting_of_ref": "indicator--a86f3b37-683c-4aa2-8bdd-b15e68ad9e55", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7c4785-f0e0-459c-afe0-220507df498c", "sighting_of_ref": "indicator--d7af2d5a-03a1-4a7a-8950-476334a2207f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71572ba4-5f6a-4c30-b33d-84dd88a7c8b7", "sighting_of_ref": "indicator--93f028bb-8589-447b-bd82-5f78a7bbba0c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ea143e-9810-48f3-a325-67dae3beecfb", "sighting_of_ref": "indicator--e4b61931-f3b3-4972-9abb-782676aa15bc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4556b7-9c6d-495d-a15f-d8f59f7ba22c", "sighting_of_ref": "indicator--b170244a-eabb-4da3-8be0-e38aa648af7e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7820d1-acab-4377-9b30-f17c8dbe53d8", "sighting_of_ref": "indicator--8057a1f4-a087-4976-9a9c-ef6ab3aa4aee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7fa071-95f4-4110-8e23-fb04b0b8e258", "sighting_of_ref": "indicator--b5e16ad9-1416-4da4-9402-e88bd7667b0c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f64d125-d3e5-4fb8-b7e9-f9f4bc781de4", "sighting_of_ref": "indicator--895d4152-dcbd-44f3-9a70-471e36a00962", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffbf83b-58d6-40de-a914-ba32474fa94d", "sighting_of_ref": "indicator--9409fb7c-37e5-4ff2-b124-355cc63cd423", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1dcdec2-b61e-42a1-8846-11dcadf7deb3", "sighting_of_ref": "indicator--9b53348b-f06e-431c-b2fa-28d52f567120", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36aa80fc-3289-4406-acdc-76e9652e7fcb", "sighting_of_ref": "indicator--fc235f45-a30f-4b71-80a6-19ac3ef72bad", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28041403-3499-4c3e-8cea-61d6837dadc5", "sighting_of_ref": "indicator--ae26287d-c959-48c7-b20f-ac3488b3f178", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf810b3-832c-4ca0-bc47-c5dbc962c3dc", "sighting_of_ref": "indicator--d23d01e0-d649-4db3-bde6-4566e306fc71", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da725686-4225-45fc-ad2e-12fae8ae67f5", "sighting_of_ref": "indicator--d23d01e0-d649-4db3-bde6-4566e306fc71", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907cca18-01b8-48ba-9142-67e00488aada", "sighting_of_ref": "indicator--2328052c-82e0-4076-80ab-c9c008721239", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07833ecd-6838-4ffa-b3c5-6923f5051994", "sighting_of_ref": "indicator--de4dca21-094d-4ae5-879b-3f76e2bb4ebd", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece59be8-8583-44b4-a414-99238ef33dce", "sighting_of_ref": "indicator--0ca2a64c-0266-49c8-a220-e4ba401e5ad4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0eb9beb-0b88-4225-82f7-fc07bc942f2f", "sighting_of_ref": "indicator--fd220cec-8a4c-4a16-9a74-65ec114c2338", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8065781-0219-4c1f-b18c-63a8aecaa293", "sighting_of_ref": "indicator--91d4d6c3-e0b4-437d-87fe-831717c5c188", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e86a555-8e83-46d5-a9a6-06a9023a6f7b", "sighting_of_ref": "indicator--5bd44830-6524-47c2-b716-3010e301be0d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1377b27c-7d71-4f29-8026-d59252008258", "sighting_of_ref": "indicator--558eb803-d1a5-4da7-8d77-683a18442f87", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bedc26a6-7b82-48f3-85f4-ddbf53129cf6", "sighting_of_ref": "indicator--2d03870f-0e9a-4a18-98de-9175aee1c359", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3834c0-95c3-4edc-928a-29655d3b8180", "sighting_of_ref": "indicator--11e23710-97f1-4673-80b4-c9eb976ede6d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61f14bf-5440-45d9-8efb-2c3ff8f87132", "sighting_of_ref": "indicator--8ab33d4e-29c9-431d-a1f4-f36557fbe842", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd37356-383f-4e1b-8258-c92002ee2af3", "sighting_of_ref": "indicator--4ac4b76c-09e2-4acd-9975-d333dfe8872c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88da582-ab2a-42b6-80ee-92b0b94d37a5", "sighting_of_ref": "indicator--9df18f23-8ae1-4134-aa6e-5e25c39161d6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab168ea8-e6dc-4521-9f49-11196be5c940", "sighting_of_ref": "indicator--815d6041-9ac1-4744-b097-5a70c17f36f2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153fc793-9a02-47b0-af52-15f38310dcf0", "sighting_of_ref": "indicator--f9faf540-0632-443d-91db-98e9de71db80", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543ebdef-4e0b-4824-86ba-7a0aa09db0e4", "sighting_of_ref": "indicator--5d77d9c8-743c-4a2e-b9eb-a0f994f38a62", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7445c09-f18a-438b-b5f8-995be2d7f82a", "sighting_of_ref": "indicator--a93b73ef-aeb9-4f19-a295-c0b812b3684d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9faad0cb-db63-48d2-949c-830e6ff64d96", "sighting_of_ref": "indicator--a0bb556e-628e-4976-8d6e-9ff380cd5f05", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58ec34a-345d-49e7-b898-c76f8ab6eae3", "sighting_of_ref": "indicator--b4d4d758-2b5d-4ada-898b-f35ea9b320e0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586df1cd-1e5c-4505-9ed5-fd3280ec0d20", "sighting_of_ref": "indicator--6884baee-794c-48d2-8979-cd3d8356ccb4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7117ca7c-97ba-4544-bd5e-c3402ff01c62", "sighting_of_ref": "indicator--934788eb-d201-448c-916f-2577fe2abb56", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b051ee-440b-4b35-b3ca-7811cd057ffc", "sighting_of_ref": "indicator--ee4c0597-d706-4b48-9abf-48ca7c0492b4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e58dc8-2d32-4b3a-8c53-e5a9e488b6ed", "sighting_of_ref": "indicator--2b03303b-dc1b-4c48-a44e-0812ee90ba83", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eafc741-5fbe-44d1-9ccd-5c85d042434a", "sighting_of_ref": "indicator--4a6c2fb2-17bc-4e79-b837-7f098bf8f715", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967078b9-a674-4bd5-972f-3683b390a1f1", "sighting_of_ref": "indicator--37c0c5ea-4549-4aac-9529-95c1c1429961", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163db478-19de-4c15-bab3-f3d7dd397ca2", "sighting_of_ref": "indicator--7f572b36-1feb-4f87-8538-453c17266353", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4441d9-b51c-478f-9235-77f97f67631a", "sighting_of_ref": "indicator--6124a957-bc1d-4adb-9100-a2521830c025", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f27057-dd81-44ff-a93d-40ca90a10c58", "sighting_of_ref": "indicator--754dd58b-43aa-47d5-8828-5ec5d8198d1d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d09605-b730-4588-8e27-a129c8b94977", "sighting_of_ref": "indicator--6d9f1d26-9bea-4f2c-9c70-6d5706f803e8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e762d3d9-fa00-47b2-8fa3-a4f2186a8135", "sighting_of_ref": "indicator--ac06ab19-8f10-4f11-93ef-919471946f53", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9770b8e-9eda-4046-adb0-fe5ae5bbbaf0", "sighting_of_ref": "indicator--3f86e6c4-814f-4f94-9aa5-108a25e93e1d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0a1964-f909-45ff-a12b-0af9ca7540cb", "sighting_of_ref": "indicator--fdf19ac8-eb96-4579-a2a6-20c9143c2635", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1f0fa2-f632-4a02-8873-6d76b1cbb6f1", "sighting_of_ref": "indicator--dd361eb9-e090-4c20-a1f8-f2b4c387c15f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22377146-d9d6-4327-8415-af952a8235ff", "sighting_of_ref": "indicator--8fd9c6cf-5879-4bb4-8db0-7dc097f1e813", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06a0d10-b498-490c-8996-a6bde074a142", "sighting_of_ref": "indicator--0baa6815-bcb7-4aae-b6a2-421cbaf19775", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc9cf1f-92a2-4871-800e-5f46bfd11392", "sighting_of_ref": "indicator--58c9cad9-aa61-4566-9ca2-a530f7f3278b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da8443c-ab7d-4564-a434-bf3c2fa52289", "sighting_of_ref": "indicator--28012425-24c4-4ea4-9e3e-b6d815da9087", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2177aa-788e-4367-a5ff-ed9b4538dc9e", "sighting_of_ref": "indicator--ef27af3e-70b7-4fce-9bd0-b22fdc320b0a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2551c190-2ed4-4b1e-a414-ea9e400ed953", "sighting_of_ref": "indicator--0f46cfca-3adf-41ca-8085-8e9d258d37f0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675a7194-6d93-4ba3-ab37-a8e497e6de1e", "sighting_of_ref": "indicator--adae0311-9a03-449e-b223-7f75462109b0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a357935-9281-4370-b64c-24d2f8c65ede", "sighting_of_ref": "indicator--47ec2056-6151-4972-9c82-cb988bdde155", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc79b822-aa94-463d-918a-155cf373d278", "sighting_of_ref": "indicator--4e0bc94e-e38d-45b3-b5fe-1c6aba79aa2a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b000f4a4-7ae7-4046-927a-4992d1815b3d", "sighting_of_ref": "indicator--fb474f23-35e9-49a9-9ab6-53669a53bc5a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4a1de8-bcb9-4bf1-97d9-631dcccb8e2b", "sighting_of_ref": "indicator--c22a745c-9c20-4d17-9116-cef70ef8f56f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc75ad2-bc08-4739-a009-009dd9d08f4f", "sighting_of_ref": "indicator--80ccfb58-39bf-46dc-87bc-407406b426cc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bb7363-72b0-4e17-be16-a4536535d7d7", "sighting_of_ref": "indicator--a493d5ff-d1dc-4cc0-bf07-f35eb35bd028", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d124b42d-42fd-420b-a2ae-cba074cb55ff", "sighting_of_ref": "indicator--eb5c7cff-b5fe-4a36-88ec-21d45c69e321", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bbea9c6-b292-42d1-9b21-3e72eace27c3", "sighting_of_ref": "indicator--ea240363-ed61-4aa9-bde4-50ac93b9ded0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fa9cd2-d5ac-41c3-ae7a-e2011844c915", "sighting_of_ref": "indicator--56af0b6e-1f82-49be-bc46-ef7e0c809868", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeaa4211-1546-47b4-aa05-9af63e352635", "sighting_of_ref": "indicator--97cc266b-e69e-4cab-9b8c-9f3e8fb1e312", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795d8011-1ce1-47e4-9f99-5df14097ceec", "sighting_of_ref": "indicator--e8bac9e4-3acc-41f8-adf7-7e45fe79cd51", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18615cf3-7906-4e47-b8b2-bc84fd5d435b", "sighting_of_ref": "indicator--8e8f16bc-90cd-4b2e-b2be-8a498984dc4f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ad7be4-7e1c-4225-94f7-028adc4e249a", "sighting_of_ref": "indicator--3c3e72c6-d5a3-40a6-9936-12c52b45cf9f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed899ee-fde0-4d07-962a-f8b7b172d4b3", "sighting_of_ref": "indicator--b1644e42-1da9-4d2a-9362-6282b1220705", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a76517-3407-4fff-a5d7-8ad21ac1d00d", "sighting_of_ref": "indicator--610715d8-e0e9-4064-8ca4-9ecbf9016dc2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81551284-27ac-49e0-a83d-55cb372387b0", "sighting_of_ref": "indicator--60da15eb-75d6-4ef3-9e04-7f0b3e6b0f06", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2070604b-8fc8-4507-8dd5-c655be148c91", "sighting_of_ref": "indicator--9d25c253-4160-4a54-ac53-5087214d7f17", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c654acc-718a-4496-8249-b9b9373bf022", "sighting_of_ref": "indicator--1a7277f1-4ba9-469e-bf7f-eca2b2c044fe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d67dd23-6572-4fcd-9ec7-3329dae63057", "sighting_of_ref": "indicator--a7fa270c-01a2-4a31-b938-0642a5a1f04a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe841e5-403d-4d05-995f-1137c39b07d8", "sighting_of_ref": "indicator--e2fbd96e-b5fd-4a82-af57-27d69947116f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417dfac8-e7bc-4940-b3fd-30c22c4dff7d", "sighting_of_ref": "indicator--8eb2b4ff-b820-4400-b184-7c4b6cabc5bb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effcd07f-1058-4140-b10d-c84a3435d5a9", "sighting_of_ref": "indicator--be7e505e-30d0-4579-a1c3-147343f2c7c8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d005bdb8-ed9e-456c-945f-a5e32f990c92", "sighting_of_ref": "indicator--b82def39-7389-447e-858a-93017476c038", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d07ec0-fd40-42df-b5c4-6803c38b1101", "sighting_of_ref": "indicator--750c8ff1-ca05-4b78-9cca-4aea6cdf365f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ea1311-878d-457b-af48-d4a2a016f742", "sighting_of_ref": "indicator--92a4daa6-fcbf-4e2a-9e9b-695022e97018", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d2abfe-5399-4a7c-a681-2c9f421dca53", "sighting_of_ref": "indicator--d00cdc24-0917-4662-ace1-d0f3c11ea4c9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261df481-566f-45dd-a8c3-4ec0036be8ee", "sighting_of_ref": "indicator--8716ed56-ee44-42b6-b766-dc80d21390f8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d8ac57-fdfe-4f08-aece-5e11e30d8315", "sighting_of_ref": "indicator--bcdb736e-1f08-4983-ba2d-89a618f803be", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2a3ca2-2177-42fe-adec-f65d5bacb091", "sighting_of_ref": "indicator--27ace5da-4389-42a3-b357-6f3eb83e7cbb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd797682-cddd-4592-8644-17985cc0b702", "sighting_of_ref": "indicator--1f60440c-6d38-42e4-b0ec-c49688e0e554", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb93afe-ca81-4256-80e8-9038fe3754e0", "sighting_of_ref": "indicator--a1ca298e-0b35-4e80-812a-1a4a40a02baf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc8edb0-6894-4892-8d11-b58b13d7aafb", "sighting_of_ref": "indicator--f2dce8e0-e8d0-452e-a9f1-a059af0de027", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd08b58d-ae1c-4fc1-acda-28ea74bc82ae", "sighting_of_ref": "indicator--beaeceb0-a974-4a2b-b4c6-f5ebac83d93b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02f3756-3b72-4c2e-8c91-209f5ce1c688", "sighting_of_ref": "indicator--2b126a55-3d23-42ed-89f8-adc58de489df", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055ecb9d-0ef5-4321-a9bb-94310b443d2c", "sighting_of_ref": "indicator--9f5f87f8-649c-4e34-bdef-df9d54466d68", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74294028-5fbd-4ae8-b211-3797db48f68f", "sighting_of_ref": "indicator--7ca22dae-22e5-4ec0-8e36-3a89c91d272e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e7239f-accb-4e20-8f17-cf4d51852a5b", "sighting_of_ref": "indicator--99d7df1e-261c-4a87-9404-bd6710fc5aed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b0ef40-f967-4e1a-a829-864780469b20", "sighting_of_ref": "indicator--0a0d4c58-4a03-4625-8bf2-c7aa2e70feaa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f5706a-00f3-4614-94a4-258a4853f0e2", "sighting_of_ref": "indicator--6f62dbb3-7389-4b57-b654-66d883c04a4f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9b7547-a375-4877-b258-b264c1e53591", "sighting_of_ref": "indicator--eabbadd9-78cf-40a5-a36a-6199eeae2656", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d996e4-5330-442a-ab63-6b8a23c841ed", "sighting_of_ref": "indicator--cc34b4d3-94b7-4a3e-8f8a-a1b1f607ec51", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a038db3e-f111-45ab-bf32-8cba5ddd4cbc", "sighting_of_ref": "indicator--dc24c634-79c5-4a3e-b20f-a4f01387bafc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438d505d-4117-4621-a41b-c4e53fe6462d", "sighting_of_ref": "indicator--ed58a68f-1d1f-49cb-8b92-ac3730755652", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c68791-d99b-4c6e-9d65-7a1921892e93", "sighting_of_ref": "indicator--ead59e17-5934-4620-92a5-0996b6ea663d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3a5e71-2156-41cc-9f67-afe234529d01", "sighting_of_ref": "indicator--96dfdfb8-6ba5-4d1a-95e1-006799c0604e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81dd12ee-f947-46c3-8521-55b22a06c5cd", "sighting_of_ref": "indicator--88ae0358-9144-4615-80d2-97c1f6b36576", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a43814-f0cc-44c1-9ce0-12aba062597c", "sighting_of_ref": "indicator--f20bf7e6-0600-4afe-983f-cab30dcaa912", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3761c14d-d082-4f92-beeb-612f56de9fde", "sighting_of_ref": "indicator--f427e601-c0d5-4941-832b-9a2db69e3356", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03dd1dbc-9aaa-4de3-b1d3-0430176dc51e", "sighting_of_ref": "indicator--999f3b7a-e581-408f-a397-89dbc1c71274", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779a352d-946c-4958-afad-762a30ecf9fe", "sighting_of_ref": "indicator--4b866b99-0c71-4c9d-957d-04f08559e8a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e734e69-4d6b-4f79-ab6c-fb70746f994d", "sighting_of_ref": "indicator--5fd64f54-7ca0-46b6-8db4-80bd02a8319b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a963f28-2936-453b-9654-6a349489d9e0", "sighting_of_ref": "indicator--d02b93d2-b53b-452c-8807-85e6d9432620", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3265f886-3eaf-4abd-ac7c-667ad76849a8", "sighting_of_ref": "indicator--f0fcc925-1278-466f-a82b-9aebc3873303", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1453a2d5-b27e-420f-b9fd-c3158abd2448", "sighting_of_ref": "indicator--31d0e291-7c69-4279-b313-5b53bcdfdc12", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940ef6e2-cc76-4b5a-abe6-3029a98f7328", "sighting_of_ref": "indicator--d4d3c0b8-87a1-4a67-b274-d76d06d5c8e6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0022bca4-7ea0-4bcb-a531-dea36e665410", "sighting_of_ref": "indicator--1ef44baf-33de-49ee-b6ee-387d2dbd3954", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30dd02ea-f7cd-4504-80e6-7cba7ac02a49", "sighting_of_ref": "indicator--b455f2c1-199c-46c3-93e6-91ae0922f8fa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31442335-11b3-4bee-8b5c-392243453a7f", "sighting_of_ref": "indicator--c40ffc96-82c6-4585-be0b-11e4d5f4df47", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17510fdc-97d3-43d0-9a1f-80bd2f34333e", "sighting_of_ref": "indicator--f477ff79-4905-40bc-913e-e6ff2b3f2651", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2becc99-c99c-4444-825a-b877bff756a0", "sighting_of_ref": "indicator--61bffd20-6f0d-4242-ad30-32ea1241954f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d89bbe4-cbef-4c5a-b2b7-4d87bba55bd2", "sighting_of_ref": "indicator--d41b6ce3-2054-48db-9ced-bddec0c41c00", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4211732-bd97-44e9-8e8d-1799764421c4", "sighting_of_ref": "indicator--9d1a63ae-3dc8-49da-9804-de5ffb1564ba", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ffe086-d1e1-46aa-8f78-42aa12bd9a81", "sighting_of_ref": "indicator--0b1903e5-dba7-4065-af26-0b80afaa438f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a987db81-4a24-48f4-95bf-e66e31360a16", "sighting_of_ref": "indicator--327d1242-f2ff-45fd-8df4-c99d237defd5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604b25c7-fe31-43ba-b04b-9fddb8e2a755", "sighting_of_ref": "indicator--a95fdee1-ae62-4d7d-903b-6435f8fa00ff", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3f6a72-19b8-4786-8368-5292a5419cbe", "sighting_of_ref": "indicator--2421dae2-5019-4dcc-8db9-775e8ac0cb75", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9e475b-4037-4c73-b841-5569fd545337", "sighting_of_ref": "indicator--9965f4f5-6658-4121-a746-67162c884594", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715e93b1-2534-4460-88ef-7c89d3fb16f0", "sighting_of_ref": "indicator--8224821f-6846-4278-8925-d0b5869cc242", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9512491b-5a07-430b-af60-7aeccf1d5133", "sighting_of_ref": "indicator--17fe7690-55ec-4e4e-b0d8-5f4f2543f5f7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e7b8cf-2a39-47d4-b59c-4f8d76e8b43d", "sighting_of_ref": "indicator--f1325cfd-ce82-4d4f-bc46-a3adfcafc54e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccbccb8-8d34-4172-b5ba-1757123976c2", "sighting_of_ref": "indicator--77e93d8a-305c-40b2-a5ed-97fa211fd394", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d2d967-0abf-4ef5-aa82-cdf842f35633", "sighting_of_ref": "indicator--da3071d1-c7e3-4ee8-bac5-d7ec8a1489a4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e4cfa6-7459-4160-8b9f-2367f7bd531a", "sighting_of_ref": "indicator--eed50d87-b2f3-444c-b376-0b0af101f1ec", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a00f979-380a-41b2-8cd3-19dbff6ed3de", "sighting_of_ref": "indicator--db970ab2-0d0e-401c-bbc0-4865747ea497", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a759a7-b33c-4b00-ac9a-6266977a3a5d", "sighting_of_ref": "indicator--6ffcebef-37d0-4f1f-a75e-e301cf951d7e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81062058-9d3e-4c49-95ad-e7f020d5d8a0", "sighting_of_ref": "indicator--1141784b-9b7e-490b-b663-01bd8a88e6cc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d95d80e-d276-4c03-bbf8-74734e3aec47", "sighting_of_ref": "indicator--5c83e210-0845-4cdd-b9eb-9e345ca0de9f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4124f635-5af1-4832-a757-dbc9969ea8d6", "sighting_of_ref": "indicator--6a787f53-5cea-45fe-be04-c03bb1f6a1de", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48d9f00-50fb-4025-b438-71f24442f73c", "sighting_of_ref": "indicator--23a31a9c-2b45-4079-9cfd-5d7120f29a84", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6394d2b7-4835-4166-a40e-db9683b294f0", "sighting_of_ref": "indicator--b78dcb7e-3fca-49ab-88c2-263d0e605a56", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07064a9b-afd5-40ed-b635-a02a79218d72", "sighting_of_ref": "indicator--17da8117-e4b9-46eb-941a-271c1d953258", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed95c6a-811c-4e64-a36d-85c87e8d6c5d", "sighting_of_ref": "indicator--b1237c0f-3a96-41ba-b1a4-44785b970f01", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af91ea68-748c-48af-9130-b33ebe514cb7", "sighting_of_ref": "indicator--86b8beb1-06d9-4434-a20b-f4d707ce9736", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0054b1-4daa-43d1-a11a-09955a4741eb", "sighting_of_ref": "indicator--eaedcba1-1bcd-4813-b4c6-fa2d691941f4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91653169-83d1-4f63-90d8-82272bc755f0", "sighting_of_ref": "indicator--864ecaa6-3081-4c4d-9a0a-1eca6bf4d7f8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3349a2-a8db-4981-9d4e-abab1d3cd66c", "sighting_of_ref": "indicator--1c0023a2-f68e-42eb-a604-133e04a4f931", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8e3956-ce79-425a-9780-66b846a54109", "sighting_of_ref": "indicator--1b29f5a8-ed28-4f85-9d25-fc7a4f170a71", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ada8bf-bf81-4226-b789-77d2e4563d32", "sighting_of_ref": "indicator--a79ea20d-d7fb-4a55-b815-dc7d3ca45375", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602fc6bb-7f5c-432f-9302-b50dc531a7d8", "sighting_of_ref": "indicator--a863ea54-c33d-45a3-9d49-39396818612f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d6f818-1244-4799-897e-839723cf4586", "sighting_of_ref": "indicator--52c53df6-939f-4b99-813f-5107b8aad6be", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcf737a-e892-4463-be45-f4b5d334fcd2", "sighting_of_ref": "indicator--1fd12e47-765e-4a56-933b-439009fd6c3d", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e84c9bb-98d6-4508-9515-14b79007f8a1", "sighting_of_ref": "indicator--860d0b34-f53b-4423-94ce-99afffbc7a44", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40916b00-1b91-435e-8be1-3be9a6321c11", "sighting_of_ref": "indicator--df69be96-f6d7-4b28-ab50-91d5830014d9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff3b049-bc9d-48df-8405-baa3be4ca6c0", "sighting_of_ref": "indicator--11f8c753-9993-4161-a281-6377be1464f8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2278585c-65ca-43bd-a455-743a7462f03b", "sighting_of_ref": "indicator--450dab7b-f4de-47bb-981f-99c0e2fe2e28", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938d4e1d-3ec8-49fc-b089-f8c025e6a7bd", "sighting_of_ref": "indicator--4778c074-0a5d-4695-9f6c-a46be4e37d9e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9120d00c-e5a3-46f5-8fc4-577a383ce50e", "sighting_of_ref": "indicator--aed9402e-8d2f-4112-92f9-cbf0e03e3add", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975b6cc9-d5a3-4226-8027-a223212f7a8a", "sighting_of_ref": "indicator--aef696b4-31cb-427f-8d92-7be551186912", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2b333d-1b3b-4dcf-8643-3f1752e5e7d6", "sighting_of_ref": "indicator--fe72c1dd-3190-4c76-80ed-6a75c609d892", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2918d1d4-201b-4a8b-92cf-094644f256c7", "sighting_of_ref": "indicator--ac84f9c4-63f0-4e12-877b-6d7b33fb8814", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4e78d8-c5bc-4bdc-ba87-b3967376746f", "sighting_of_ref": "indicator--bf25487e-f654-4693-86bb-94e71617953f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2b048a-4e3d-4894-9eb9-0282fe5329e6", "sighting_of_ref": "indicator--144f5f5f-1915-4227-9df3-fbcfb8c18919", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750d9a10-07f9-4b7c-95b2-f5d673a6c09f", "sighting_of_ref": "indicator--d4664710-09f4-41f4-841a-eaf2c5b45cc8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21588143-0062-4793-9b90-01ebf2c266dc", "sighting_of_ref": "indicator--c79bccbc-29ac-4090-b855-96655aea8bc5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70be825-52c2-4c70-8c55-d2151dc48624", "sighting_of_ref": "indicator--3f22d855-7af7-4ef4-bc80-dea5d7c74f43", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77025a51-6d41-43cd-a49b-698e63eb312f", "sighting_of_ref": "indicator--f7701390-242c-4c7c-ade0-6a4aaaef6505", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898c78e6-d455-4c09-8a16-464fa4b64b10", "sighting_of_ref": "indicator--7590f90a-5c66-416e-ab7d-9f7077ff3f3a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3eb0772-6b16-4731-b1b8-bc9b5c16df6f", "sighting_of_ref": "indicator--a557ea3a-706e-442d-aaea-883906c23524", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5c1ca7-a7a0-4f1b-aea3-9ed99cd5d7b1", "sighting_of_ref": "indicator--999413f7-2836-4ff4-b15e-3a928ad63e75", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be52ef50-c8a4-4497-b795-c206df5ec623", "sighting_of_ref": "indicator--8142a972-d9d9-4507-b19e-96a837be0b58", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa215de-9fe6-4e51-9cdd-292418335818", "sighting_of_ref": "indicator--a2dab6d0-73dd-449c-a785-5d26448317fe", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b78354e-2a94-4538-8a24-71c8f477b211", "sighting_of_ref": "indicator--c7b79b02-4c67-4e8c-aa38-726ce1837591", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01184465-1aad-46cd-abdf-d7e194574baf", "sighting_of_ref": "indicator--6becf629-fa94-4e23-8b1a-260fd4fe2689", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e572c0-125d-4121-b3a0-62d37de5df16", "sighting_of_ref": "indicator--312e4686-f13d-47f2-b2b0-b860204e83ef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd678d1-905a-46a8-87a3-0c754fa43028", "sighting_of_ref": "indicator--69ec5672-6e84-4382-b05d-fda60789dea5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247d49f8-db17-4c1c-912f-d33e68803ee6", "sighting_of_ref": "indicator--ba183222-b248-4672-9517-6a2e93aa50d1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65c027b-46f4-40df-a6ff-c40076f81389", "sighting_of_ref": "indicator--01bdf5ce-c905-4cfb-b001-a6897d564b57", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e65785-8bc3-4075-95ca-c11edf8d93c6", "sighting_of_ref": "indicator--186be96e-b7cc-47c7-9f9d-d1c6cfdc9477", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c287e3f2-d75a-43b8-97af-353409093699", "sighting_of_ref": "indicator--7fb5c105-0acb-4c32-820d-57c382a99c48", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea94dcd7-781b-42e5-b949-0120e2de77a0", "sighting_of_ref": "indicator--b8b8fe1d-2725-45f4-b562-7a34208ef744", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79388b0-b614-424d-b499-039c15585524", "sighting_of_ref": "indicator--41173460-4af5-430f-9853-51521217f9ac", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f93475-8c10-42ec-86bc-141c8165a24d", "sighting_of_ref": "indicator--b872a5bd-e613-4ccd-9d1c-24319773303e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92bfb078-e3bc-4423-af9d-2fa2a7bacf6a", "sighting_of_ref": "indicator--6f5ffed8-4103-485b-be22-c50f0c3f15ed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc10a9d-8720-47a7-95b4-4c6b80ee4dea", "sighting_of_ref": "indicator--b12372bf-2510-4e62-b2a4-2ddfa93ecb85", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916d2af2-7556-4f94-9329-50b7ddb60f85", "sighting_of_ref": "indicator--79dc7828-5118-461f-ad1c-4a3f9853c742", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5505c80-e35e-4a42-aa18-19f5a8493eb6", "sighting_of_ref": "indicator--b3d37b1c-f741-430f-804d-46f526eaef38", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26982977-a661-4125-8e47-27ee1bf14904", "sighting_of_ref": "indicator--dce4ec11-ee3b-4f03-8643-bbf4813205b1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e5f906-6da0-4240-87ed-6340a81c48cc", "sighting_of_ref": "indicator--719625cc-a16a-444c-b5bf-f3e44d2177a1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fbaa73-a6f0-4152-9de3-bf63b56300f9", "sighting_of_ref": "indicator--57dc0842-11cf-43a5-baeb-f01f4ccf9240", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7636fdeb-682c-4a53-a247-aee134a0b711", "sighting_of_ref": "indicator--f8c28c5a-cce2-4e2f-919a-17c507230a68", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4fee90-64e1-4420-97cb-cb3c325afcd2", "sighting_of_ref": "indicator--3f79bf72-033b-4367-8c00-6763e9f1bf84", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6562ae7-f0a1-442e-967f-2a2df89b9874", "sighting_of_ref": "indicator--eee2b17c-c282-4a06-ac86-1a93bc0ab4b1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289e5b4f-c3de-4cfe-8bb9-5cc2158ba8d3", "sighting_of_ref": "indicator--0875ccbc-76c3-4e09-a88e-46499f1290f7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a157efa-9065-4b78-b8b7-4c399b3f18f2", "sighting_of_ref": "indicator--d962599f-d68c-4181-a857-1683158c65e3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be39c8e-6415-4373-a687-1decf1c1eb89", "sighting_of_ref": "indicator--25c008ee-a863-48bd-80b3-bc288af1d76e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c195eecd-e02b-405c-a79b-174a4d3bd353", "sighting_of_ref": "indicator--3ff32291-a916-445e-bb1c-40e88a5a106c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937445d1-d21d-4a09-ac18-da5d9f4d6f73", "sighting_of_ref": "indicator--b793bc57-61c8-47ff-b10b-763ee2048678", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c78f9a0-5e50-429b-b94e-99c037ba9018", "sighting_of_ref": "indicator--ffd8eafa-33d5-4691-95aa-66a6fb20c946", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b36ef42-e702-417b-bc01-fe7dd3d12ecc", "sighting_of_ref": "indicator--d258c3c5-455d-4271-b2ef-703b8b8330b1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72d038c-6b9f-4467-8577-fdd1546dc5f7", "sighting_of_ref": "indicator--e0a394bb-26f3-4a4c-8f78-a18b98216c95", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675ab3b0-6b70-4b81-9653-fc417dded3c9", "sighting_of_ref": "indicator--a413c2b3-0e2d-4f61-813f-34a5860927eb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574d0470-4438-4386-8177-900dc44ed10a", "sighting_of_ref": "indicator--96fc62c9-1b6f-4e61-a6d8-5b274d4f8c7a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4818079e-1710-46f4-a29d-39d4a18894b5", "sighting_of_ref": "indicator--144f6ca5-6f99-4c09-87c5-ee6c1d631978", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babe7456-db0f-4a66-8784-27a877cca94b", "sighting_of_ref": "indicator--fa881c7e-4f32-47b7-b70f-10b875c904eb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c01be90-2647-40db-86df-3791e4470b81", "sighting_of_ref": "indicator--0e592cf5-25a0-4a37-a065-9a8de99e0737", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1e68d3-c3de-49dc-a1b3-facf0e1e0c62", "sighting_of_ref": "indicator--e462768f-ed12-4da4-8339-76a5d2935a59", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d88c48c-996f-404e-8ed7-41730386d745", "sighting_of_ref": "indicator--4a6a94c3-8950-41cc-b262-942ae7b18783", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9322e4-da17-4874-9df6-24bf695b6305", "sighting_of_ref": "indicator--ee51732c-a261-497d-b383-5db190ef1d47", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1e984c-a331-481d-b5ac-a1c0d195addc", "sighting_of_ref": "indicator--4611dba1-78a2-4efd-9353-80aa6b3611f8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ba79b3-0e23-46af-9244-93065e015000", "sighting_of_ref": "indicator--e8a9ae40-ea06-46d9-91c0-69ae5d9f33ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a80c6af-968e-44c8-b8c5-93f4012c27e6", "sighting_of_ref": "indicator--67d76ce2-4109-45a5-95df-ab98e6ad5dd1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7ff059-3489-413d-8669-93bce25d502b", "sighting_of_ref": "indicator--391bc40d-a8f2-4e27-9e3d-dfc7cd7027e0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1f991e-9947-4138-ae36-ab0bea90913d", "sighting_of_ref": "indicator--6876bd58-9952-45af-bbaa-d974c9650ce0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54a061a-ede1-41eb-af17-6366e126acf4", "sighting_of_ref": "indicator--ba38f501-7406-4308-984d-f2be58a6bd9a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4454a27e-8df3-44ef-8073-c20cd974fe1a", "sighting_of_ref": "indicator--ce95e714-49a7-400c-b725-849774120f55", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4683ff81-1f8c-4102-b6c1-6358837ee7fc", "sighting_of_ref": "indicator--cc4857d5-23ea-44e5-b514-b4280f23268c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3907f2-843f-42d8-89b6-a7d7b8cca517", "sighting_of_ref": "indicator--32f9da9e-aa61-42db-8645-b1fed8e51fa1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3598ad54-5097-4d43-9c14-b819f295ff8c", "sighting_of_ref": "indicator--a7d56a31-746f-417f-b814-35e241a27eb0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37810e38-4ceb-46ac-a629-48617053e981", "sighting_of_ref": "indicator--071fcff2-9dbf-4ffc-80c6-8b9c08097f3a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89898cc-c20a-4d8f-95d7-0db969f5897e", "sighting_of_ref": "indicator--89396eb5-f661-4aa1-b3a8-18fac0c6c021", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5283a52-a03c-4e00-8b46-28add93e5409", "sighting_of_ref": "indicator--d92ccb67-1187-43f4-b3f0-4800a211f8c3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b782bce8-33f2-488e-8497-1a032c94ab58", "sighting_of_ref": "indicator--1d815044-8f90-459b-998b-a5f3b552e972", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19b12b5-84b2-4aa1-9356-762fa585a4ac", "sighting_of_ref": "indicator--edb0a18d-873a-45a9-9952-cb2084b6af82", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb6f63b-d411-4ab6-858f-e3e00783f1de", "sighting_of_ref": "indicator--c5c1357a-32d1-4469-b771-458cba132cf4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d3a6bf-4998-4cd7-9511-cf4e77e15641", "sighting_of_ref": "indicator--473af939-e479-4099-a0d0-6db764f2dda5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d15422-e558-479d-b04a-26972b52fe9f", "sighting_of_ref": "indicator--89b5f9a5-5deb-4cc6-86e9-1bab2b78cfc7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593b610c-5447-4023-b403-e96e080c5538", "sighting_of_ref": "indicator--224d7bbf-a38a-4112-ad1d-fe5fb2071bdb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1225e6b-5dda-4071-b01d-85b36c90a1ba", "sighting_of_ref": "indicator--ac572e9e-4c7e-43b7-a174-6f78cff03023", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80f733d-036e-4124-8809-c308906ee1c6", "sighting_of_ref": "indicator--f3c89989-3104-48ec-8956-1cc91ac02df9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ab49dc-c64e-4ef8-bbd1-2ef6d4d8d972", "sighting_of_ref": "indicator--af08b21a-f8f5-476e-a4b6-72cf36411f10", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f091a635-738e-4f4f-a740-82af9981d36d", "sighting_of_ref": "indicator--3baee76b-f355-4df1-8b32-d66e84acbd15", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b191b882-27aa-499f-b3ff-bb960722bb98", "sighting_of_ref": "indicator--2ef1937f-1483-43a8-a205-925046b9a716", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa2d85e-4e90-4dd4-97db-732f6400e714", "sighting_of_ref": "indicator--6e7f98e4-58ee-4921-846f-83ef5953d3ea", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce486a0b-fb64-47b9-b76d-3f445326a452", "sighting_of_ref": "indicator--ceccb8e0-354a-4918-bcc0-607b4a416ef9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a82b29-c8b8-455e-9f47-59dc9ac92a20", "sighting_of_ref": "indicator--6e4e1bca-a00f-4399-9412-a04bfa48a712", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1175aa11-de4d-47ad-a5a2-890b9de1b289", "sighting_of_ref": "indicator--d3cd1e3e-9c46-47e6-828d-289d5d5ff445", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ba6a19-066d-4f0b-8c80-201485a72c86", "sighting_of_ref": "indicator--ee152f2c-bdce-4ecd-bdcc-e93f44047cbf", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9428b0f-8a41-49d3-aa59-253458bb2855", "sighting_of_ref": "indicator--132f33aa-ade5-4a29-b014-4099fae2b77a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a729204e-e189-4057-904e-7fa2922a88f9", "sighting_of_ref": "indicator--b5c8b87a-ae33-44ac-a90c-f79c8fd60a78", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f94e049-4d25-4781-a4e2-d0f6f1bebb5d", "sighting_of_ref": "indicator--a507fbc0-c7d6-4323-b4ec-5046976e6e67", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23f7984-070f-4e11-8776-9ace99645ea0", "sighting_of_ref": "indicator--6716527f-fc8b-4aaf-a39e-3acbb69eb012", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6526cca8-f06f-4bec-ab93-d4443d97da7a", "sighting_of_ref": "indicator--78a95de3-f124-453f-8cac-5531f585e4aa", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2924da-0615-4dc1-80c9-289ad6816fcf", "sighting_of_ref": "indicator--98847e4d-e2ff-4be9-af19-e4bfbf318bf5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03d3d76-8da2-419c-a6d5-b6cf71972b89", "sighting_of_ref": "indicator--2511d629-4a28-4eea-9adf-69f1c2fa2593", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa47623-fd44-47d3-ad3e-19156feda366", "sighting_of_ref": "indicator--e866977d-0860-4909-a143-f71770d6c9ae", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b54af9-24f5-4ac8-97b3-adc118835dbc", "sighting_of_ref": "indicator--4944d037-13da-4969-8001-9a0a03ebbd28", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65800a4-aacc-4bb7-a543-c2bef2abdaac", "sighting_of_ref": "indicator--6c4bb3a8-5376-4d71-818e-4e491080c442", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7888c1d4-a3b7-4aff-b99b-3e4afd6619fe", "sighting_of_ref": "indicator--e6b81076-5f33-4848-b2ad-b59e2aeb3156", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e4405f-1d22-4676-9954-9386e642c6b0", "sighting_of_ref": "indicator--811b13ed-49ed-49c4-8ce1-f1ee8b24471f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5891f8e8-7744-4da7-bd32-fc3926af462c", "sighting_of_ref": "indicator--2330a7a0-cbf0-4c6e-97b7-6c3ac455b5ca", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c4f40f-4c04-447f-97b7-241054e593e9", "sighting_of_ref": "indicator--2330a7a0-cbf0-4c6e-97b7-6c3ac455b5ca", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f464ea8-114d-42b3-a13a-d6979ae2082f", "sighting_of_ref": "indicator--8f429c0d-b6d8-4bcf-b2ca-cbe5c9ecd695", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d19fd2-f3ca-44b2-9983-2c4419b682a2", "sighting_of_ref": "indicator--3add706f-0796-4a95-94a9-2e2ed002a882", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b114cedb-e4ab-4d56-a4f1-ffd875bcbbe0", "sighting_of_ref": "indicator--bc340c96-0fb3-4f34-855a-ad2b260d6224", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282142d7-8c95-4b74-90e7-1dfc4a4ce4ff", "sighting_of_ref": "indicator--4d540274-76db-4e79-b6e6-98860f75a3d1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f4837b-8142-47df-a013-5ebd8ba46d73", "sighting_of_ref": "indicator--ef6117fe-b942-4e11-8689-1a7808e10bef", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d605de-d020-4e0c-8d60-729fcd20114c", "sighting_of_ref": "indicator--4c8fe594-e24e-4114-9f4e-3cae62f09800", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65724fb7-f9c7-431b-a207-1e584646fe82", "sighting_of_ref": "indicator--c0d8fa23-7806-4200-96e1-fd1748782c41", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773e088f-e115-44f1-8a79-262765da0ed3", "sighting_of_ref": "indicator--38e7870a-2826-4f10-84e4-314128e898ba", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae825c09-c1b9-4675-88cb-c41d16460a08", "sighting_of_ref": "indicator--449a9261-2d04-4cf4-8378-d5824557c78c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faff05df-f929-4ad5-a046-a494aafc8798", "sighting_of_ref": "indicator--a5f51f86-565d-4e88-9641-44ee4a0c8492", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10d2132-a76a-478d-b05d-e4beeada77c0", "sighting_of_ref": "indicator--e934be52-c07a-4972-bf92-4a83ad84d6ab", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d508ff4c-1344-4c4d-b906-593556d409e1", "sighting_of_ref": "indicator--4747c2b9-bde5-4790-97a2-9f8f59c96946", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71547b3e-685f-47cb-ba18-b002713b3e02", "sighting_of_ref": "indicator--59c890e4-9a5b-484a-9d58-44ab571b0597", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8937c95-34ea-41d2-918f-47ce53c48bc0", "sighting_of_ref": "indicator--fcaf6977-aa4e-4c0c-82a3-ace0bb6bf1b3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd41c78-faf8-4503-931f-e344a5d9cbcc", "sighting_of_ref": "indicator--0697ea4d-9bef-4cbd-a47c-36d9feece3ce", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6380895c-7078-4854-a9da-ec0f170974d9", "sighting_of_ref": "indicator--a3960dcd-4915-4303-8cca-42e06d9c5e7f", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91a4fce-eed0-482b-8360-9a0cc58e4410", "sighting_of_ref": "indicator--39013e52-7f0e-4dc2-82c5-dedf188a5b05", "where_sighted_refs": ["location--572f1b43-2bb3-4bfc-902f-790130c33bc1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49394df2-0e29-4c77-9fcc-9afed2b442bc", "sighting_of_ref": "indicator--11a4c101-0218-47f6-b11d-b11135e3d01c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e769e69-51a2-4744-b600-8074e66ba23e", "sighting_of_ref": "indicator--3c48f3f1-1691-4a69-add2-14e98161ed38", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4203e272-fc9e-43f9-a720-5a433f2f525a", "sighting_of_ref": "indicator--5f97855f-2724-4da1-b728-8807c4578023", "where_sighted_refs": ["location--ea14a19f-862b-4dc2-8b0c-8751708b2127"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032a85c2-425c-4753-8b97-2e419e48f8fe", "sighting_of_ref": "indicator--b218a5a1-cfa4-4eda-8b40-25eb9d494763", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9607c08-b893-4c17-a1cd-e1b56820e404", "sighting_of_ref": "indicator--c3e9b6e0-9da4-420f-9aac-ca56f33f877e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75195470-2233-4a3a-b5cc-e37cd152a757", "sighting_of_ref": "indicator--90b574e6-035b-4d32-9107-3b1f5fcd9c5b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3597373-db00-47e6-aca2-6416fed5981d", "sighting_of_ref": "indicator--6dae1a9f-d9ef-4520-b017-620d16c3d08e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3996b8fa-4237-4baf-b2a0-36bce1b6c602", "sighting_of_ref": "indicator--f33d3720-5fbe-4bf9-bafe-e7faf83875e0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5765987-132a-405f-b9e1-4f2a211eb3b4", "sighting_of_ref": "indicator--36230127-4f17-40cd-95f6-0d3003324b79", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49be5eef-2310-4b4b-9d3b-5456d1c1536a", "sighting_of_ref": "indicator--00a65cb4-3ff9-4722-9714-07a3ca0efcc0", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e770e7b-3128-40f0-ac81-85480f467cc5", "sighting_of_ref": "indicator--8200ee49-4bd2-43b1-b356-d1e2d51d840a", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a018c6-911a-49e6-89a7-77fb1c8fac2e", "sighting_of_ref": "indicator--d6d8e394-6f17-46fd-b363-e8dd3cbee042", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe5a502-9855-4cd0-8d73-d69f1aabcbfb", "sighting_of_ref": "indicator--fd8ea7a6-8ea6-470b-954b-95da79903121", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68ffc40-700a-438f-88f8-4f211801075f", "sighting_of_ref": "indicator--e4479306-0f66-419d-a67f-1858fe9dc1f4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d56ea9-047f-4d45-b361-46fcbb0a035f", "sighting_of_ref": "indicator--bd89051f-d6c1-4103-9e6b-cdb305ac8c7e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6dbaf33-f703-4cfc-8e84-2f2f7abdca31", "sighting_of_ref": "indicator--45d711a4-b9f5-4844-94a8-63065db9a754", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53b050b-5b63-4c93-a2a4-90e75efa3916", "sighting_of_ref": "indicator--71f8e475-be9e-4436-851f-6b878cc3ccd8", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81366a6-565c-4846-a798-7b8c0330034f", "sighting_of_ref": "indicator--dd76ba1c-9941-4cda-8a41-160321de4fb2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe9d274-3f81-4c4d-a7d4-20333bca9b99", "sighting_of_ref": "indicator--5d3473c3-3771-4312-9d72-a15e8f3a7869", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3d1ef9-ee08-409d-84ea-96c1dc14e5e1", "sighting_of_ref": "indicator--6e62185c-3292-41d6-ac6e-a826c1855239", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf078d0-0c53-4116-b401-5d2e190546aa", "sighting_of_ref": "indicator--9c48f147-a3dc-4b12-8e7c-b396aa4b8f90", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01ec62e-5433-4549-8d07-63df35962cf8", "sighting_of_ref": "indicator--bf8a7b19-7987-4e3d-ba6d-aabb2b52a35a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b1cba5-b8b9-46b3-bb9b-0004013e3c7e", "sighting_of_ref": "indicator--2cce096c-bead-4378-a3cf-aa421ff453a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81de74ae-a11d-46c5-b6f4-1791400f24ea", "sighting_of_ref": "indicator--bd4446ae-f059-484e-ae53-0792452a2e10", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f98b1b6-0e85-48a9-a5a1-c5d40a0e81a7", "sighting_of_ref": "indicator--cc1f7efa-356b-440d-ae07-b2c0b1ba81dc", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd95fdf6-904e-4e4b-accf-10f85466145e", "sighting_of_ref": "indicator--871b7565-5ad2-420a-b662-480549287cb7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ee73fe-43e9-4035-879e-99643d7b25fa", "sighting_of_ref": "indicator--54fc6c51-ae5a-4048-802b-1e80319346b5", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2c8b27-ae8e-413f-be0e-1c544bd2a6c3", "sighting_of_ref": "indicator--ea3cbd88-30b7-4714-a5a0-430e830dde0f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d818c6f-8d15-4669-92a4-db6703869370", "sighting_of_ref": "indicator--ef8ee852-8619-46d2-be88-ae0a094bf4b6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9826a58-28dc-4eb9-ae63-4f6a973327dd", "sighting_of_ref": "indicator--5602ac56-6e49-4220-a3e3-94f8915477f4", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb65dfa7-6eca-4d24-bbf4-fbb84e4be45e", "sighting_of_ref": "indicator--2d99fafe-a64e-42a9-95bb-df293c56254f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cbfc15-acc2-4a4d-8c86-d9bc90cdaaa7", "sighting_of_ref": "indicator--428f0f96-4ae9-4e66-85f6-927a5d09e8a2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15658fac-25d0-4c79-93cd-742faf4297ca", "sighting_of_ref": "indicator--e6906e13-c406-4417-929c-97235e3c546b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d547e8f-b9e3-4bf1-acb3-11377842d35e", "sighting_of_ref": "indicator--19ca88a0-df8f-4800-a693-c24cbc8212d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce470de-45c0-4893-a543-24ab627071e0", "sighting_of_ref": "indicator--64eb7790-af71-45c6-a65e-4c8fc82abb1b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a2d502-ae8c-470c-9f62-4ef60e56b668", "sighting_of_ref": "indicator--ff346482-566b-4dbe-9353-e7c77040b0cb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c6b1bd-8353-4258-baaa-9ee1226079eb", "sighting_of_ref": "indicator--0666d1f9-11ff-4950-a2c7-e58ee6e4b6a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7706a07-e6eb-4c6e-b66f-ef34fa1823a3", "sighting_of_ref": "indicator--de81e84b-67bd-4468-a18f-45f1d50302e3", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb537f55-243d-4281-b260-3de655ad3328", "sighting_of_ref": "indicator--2b7a3aad-0979-4f09-abbf-3e41403e289c", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d237614b-a2fe-4fed-a422-e8bbc4159a06", "sighting_of_ref": "indicator--5c61f667-9a16-4224-b313-fb2fa950b2b6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd1c6d0-2265-489f-9317-8ce256dab87f", "sighting_of_ref": "indicator--03a9181d-b8d1-4f9d-8e49-d14a71b5968a", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82fd4ac8-c411-420f-bfb9-ee928b974d8f", "sighting_of_ref": "indicator--c0de7203-5e74-4733-877c-79910cb7eebb", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e207047-0d9d-4a51-a241-40414f08af16", "sighting_of_ref": "indicator--f42edd2a-199a-469d-9edb-7f3c90cb3533", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22838e8-4f95-45c4-8d0d-1844edbf0c65", "sighting_of_ref": "indicator--8260f34e-66dd-4c73-8e8d-9779bf4e4748", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0508da50-b876-4db0-8f06-341cc453d625", "sighting_of_ref": "indicator--12686965-4b13-49d9-883f-114370dea5a6", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e7ba2d-2d22-4f15-92a1-f675d2a02b9e", "sighting_of_ref": "indicator--5a007be2-5f76-4a31-9dbd-ae4c573d100f", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7327e5b3-20d1-4e08-aae0-540a3e6e9c98", "sighting_of_ref": "indicator--5f7b0f03-e1f3-4a43-b4bb-f688d309ec69", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf0e6d2-ff1f-4f0c-8af7-0e355a8367ab", "sighting_of_ref": "indicator--79e2fe52-f276-4120-8197-b73484c79462", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a280bdf-979e-4a9f-b841-4789f2e2efb5", "sighting_of_ref": "indicator--7e08bba7-6faa-4174-808f-c152cf2eb2c9", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4512fb65-1421-4835-86f3-8199973e982c", "sighting_of_ref": "indicator--653c2553-d93e-488d-8397-caec0b15a447", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d982805-b5a7-41e4-93cb-ac5273e4fb58", "sighting_of_ref": "indicator--fad1fdee-d838-4dda-8061-872c7cbe5531", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03c9b8e-f074-443b-b13c-3d60a5e47233", "sighting_of_ref": "indicator--68f59b56-b879-4cd9-adf1-db824b445c9b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6feb487-a253-4369-98d5-b77cb73d9099", "sighting_of_ref": "indicator--507262b1-94bf-40b9-a6e1-73a4213f6cd7", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660525b4-edb5-40a5-9d89-7f64448add66", "sighting_of_ref": "indicator--884bb44f-12c2-4e39-822d-c1031f823be8", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c47684-99b2-42c9-816a-3e6b8692a571", "sighting_of_ref": "indicator--43f80d9b-d942-447c-a3d3-e64855215e66", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61182bde-fd95-40f8-bdd6-e088f43b3d97", "sighting_of_ref": "indicator--7eeef39e-3406-4545-bd83-226d024d9817", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b36d52-8280-41cc-b795-be13d16fe24c", "sighting_of_ref": "indicator--a7bfc32a-5aed-4101-8740-5d031e44f0ca", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480b233d-1306-4009-a402-4d17b3b3ec38", "sighting_of_ref": "indicator--0f62072c-77cb-47f3-9f08-a855a0628087", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96ebb38-2053-42ee-9445-184e718cb7c3", "sighting_of_ref": "indicator--336056ab-ec40-4f98-9ba2-52ca8648dfc0", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c46b54-4a63-45df-bfd6-0e3c96afd73f", "sighting_of_ref": "indicator--417e5aef-6855-4c6c-8f33-ea37fed58a44", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dc13e7-d0ae-4d37-aa9c-3cb47943eb3c", "sighting_of_ref": "indicator--20cef544-fe81-4a9e-9660-9b318dc6d47e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb2afd8-0610-43e3-8209-7d2ac94c06a6", "sighting_of_ref": "indicator--2d87ffda-97e2-4e07-b7e4-52f3978e1cba", "where_sighted_refs": ["location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c69aba7-8353-4314-a6d3-19e833bd5816", "sighting_of_ref": "indicator--c1e985c4-ae7f-4d33-b63c-a543418f1d32", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3dca54a-3186-4cca-8c8e-4cf8c2a9a8f4", "sighting_of_ref": "indicator--1c65ea4c-5ced-4d0c-99e5-1b11a2be6f4b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8baa4e6c-644e-48fb-bf14-fc06b45d4250", "sighting_of_ref": "indicator--6c69b19c-ceb8-4090-879f-df0be4f09366", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b366f7d-a011-43b5-bb2e-cd2d993e5138", "sighting_of_ref": "indicator--999b2e3f-e6f8-4a0c-9927-6d5193b277a9", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb44e6d-9dd1-4eb4-91b5-6df434afd252", "sighting_of_ref": "indicator--4967b69d-8275-4de8-9b73-48a3fcad9809", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a21d69f-47c1-48c5-9372-82cbe5853767", "sighting_of_ref": "indicator--74ac2661-a4cd-4432-aa74-6a748197de81", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c3557a-20f0-4267-9d73-f2b16c2ca718", "sighting_of_ref": "indicator--920fdca0-6113-4550-957e-de2a16abfff0", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b590dc10-7a51-4a2f-b448-6d237ce7dea1", "sighting_of_ref": "indicator--13f1f61a-1dba-4cb4-93c8-a93f8a05f2ee", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f7b4db-9947-4147-9a8a-74a49aa6d0f3", "sighting_of_ref": "indicator--35286746-fb0c-4b8b-a50f-d905902e4fb7", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e8ebe6-2e7b-45da-97c2-f5fbc0113a43", "sighting_of_ref": "indicator--5ff02c1e-7e53-4583-888a-4b76e5881599", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5d1eda-85f2-4df2-9d9b-81962eadf61f", "sighting_of_ref": "indicator--cb235da5-0f58-4355-9c1f-6df35302738e", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8c718b-3540-474d-a373-539d6be28c0a", "sighting_of_ref": "indicator--b468b173-2c08-4cfa-84f8-f356042fc0f1", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f875cfc-aef0-42e7-bf0f-126213e079f7", "sighting_of_ref": "indicator--e898f617-a38b-43d7-8a0d-4a3f2b1a656b", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03e8e13-bd07-4b28-891d-0f72418afe56", "sighting_of_ref": "indicator--40803bac-3977-47bb-a817-62ce08cf9e11", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582e5f9e-73c2-49d8-abad-e30fa47661d3", "sighting_of_ref": "indicator--e2b9c730-be31-40d6-8787-fd244e7f6be2", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3149f0b9-90f2-4d51-99de-40d2a1ec6186", "sighting_of_ref": "indicator--97976992-3f63-4e90-8a97-631c738ce5ed", "where_sighted_refs": ["location--bedd50fc-91c6-4cbf-9691-fb327893c9b8"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846226a2-4e70-4eb5-bb07-742802fdab7a", "sighting_of_ref": "indicator--804af10e-4bca-4cfc-a079-8dd12b80608c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-08-22T00:00:00.000Z", "last_seen": "2026-08-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--cffb229a-3da8-4ecb-9477-f03fa7a2e1b2", "name": "Threat Report for 2026-08-22", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-08-23T11:00:01.863Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--bedd50fc-91c6-4cbf-9691-fb327893c9b8", "location--572f1b43-2bb3-4bfc-902f-790130c33bc1", "location--45eb0641-a7f7-425d-a0a8-49e4de2f54a1", "location--ea14a19f-862b-4dc2-8b0c-8751708b2127", "infrastructure--e71bb554-b226-4bb5-87ef-51fb83eb6324", "infrastructure--01607549-b051-4747-8c0b-4de65eda3f33", "relationship--b0005df2-889f-4b86-9cee-fa3bf325951c", "infrastructure--69c58d20-2f49-40c1-9467-72030f202559", "infrastructure--8f2d87b3-a558-4406-8b17-382f9037569e", "relationship--5a89f546-a281-4a6a-b3fb-feb6f68d63a2", "infrastructure--7d9081b3-dc6d-41d6-8d5f-5a5fb6e53b3b", "relationship--0bec10b8-cb5b-4a83-95dd-3f691f5e1543", "infrastructure--6e02a65e-bae9-49c3-ba79-ea0562aaecaa", "relationship--1bd0d42d-b591-4895-812d-a754064ace72", "vulnerability--c81e14e0-c6e8-4463-9ffb-b98b2c6a5160", "vulnerability--ff159f14-b1a1-4359-822f-45941adec36e", "vulnerability--b4c1dece-ddb4-4491-80dc-4a235237b191", "vulnerability--30006960-b601-44b9-9dd3-c99dfb017c05", "vulnerability--78e0c24a-2cd1-472c-a9cb-5e772efcc568", "vulnerability--f74fff85-2722-4526-9342-7d2d2b0f8db8", "vulnerability--15c116e4-e347-499d-aeb8-c5049d6663ac", "vulnerability--1d2607e4-d6eb-417d-b015-b94ebe505ef7", "vulnerability--ae9173a6-de5f-480e-9c65-11bbd60b77ad", "vulnerability--a2257583-2ae2-4920-8e5f-444787dcd26d", "vulnerability--6438735d-4dc9-465f-aa37-42f44bbddec8", "vulnerability--68115e2a-3a12-4f80-b6b0-bc97e211ee1b", "vulnerability--51fabef0-a353-4d32-b8ff-98e2d3756318", "attack-pattern--ccf3d1d2-e476-4ce7-bcdb-4aa7379c0125", "attack-pattern--f2335446-3f27-4b9e-aa8b-89a8cfaf2ec9", "attack-pattern--711771cf-7c5e-4400-8a3f-98333c379d2b", "attack-pattern--2099f92e-22d5-4f56-830c-a0f433029f77", "attack-pattern--59afba05-d656-48d7-803b-b3f491ed7e6c", "indicator--868f776f-0b0c-4076-9290-556b8b7e9e1e", "indicator--9a2e54ea-4b29-4633-974d-3d9a8e098de6", "indicator--c2053828-36de-4b97-9d50-7612875f7c65", "indicator--181655b4-8e0d-4676-ba8d-402f2a9fcd4d", "indicator--412f0df3-8f36-43e7-b353-6308914a9761", "indicator--8b1c5eee-66ef-405a-9e5c-5aa0404c04d2", "indicator--95aeab8f-a5e5-4acc-981d-60ca76c256b6", "indicator--3402eb96-4221-46f1-85a2-abfdcd25740f", "indicator--91486b87-f10a-4b54-9e9c-3118aadfd38e", "indicator--1bf55d12-0524-4a6c-9dca-f4b5d0888fb7", "indicator--723f306b-778f-4a87-853a-f77324f35285", "indicator--0c9cfe24-c0ce-44c3-b3e8-8346bb8b06bf", "indicator--ef94781e-1be1-43d5-aac8-a6378a42a729", "indicator--28b30254-5446-44a5-b15b-8a571b5f1b24", "indicator--057bb10d-86e2-4a37-ba1d-973c6bbd93c0", "indicator--0fdf176b-0aef-41e7-aabc-0b347276326e", "indicator--075aef4e-16c0-4ebe-85b9-6e62b602eff7", "indicator--561f0f53-9ce9-47d9-af2a-1cbe988a2f96", "indicator--9fc5a9d9-b2fa-4cb5-b235-dd02ce50eab0", "indicator--71962d9a-9b42-4923-9591-3ef98d0e043f", "indicator--4b7ba78b-c085-4d42-9316-5ad6b07527b3", "indicator--3c33c882-0fd6-4523-8ab3-a405d5fe8d6b", "indicator--90651a7c-3472-48ae-aed6-616a078611c6", "indicator--db8c8abb-aa52-4421-b5fe-c6112a234724", "indicator--5b08b104-f1ee-4b77-a017-2095885b7314", "indicator--dea8593f-05f4-4e2a-9f4f-51e78d1c81fe", "indicator--44fe703b-1a58-4a65-b941-fac2590ac6bc", "indicator--3c9fd892-19e5-4a1f-aff1-c923c387e40c", "indicator--db238ad7-54a1-46cf-b6e7-ac9ac6998819", "indicator--40053316-ca19-455c-8e65-84f041f7ee07", "indicator--62f378a8-3660-435e-97c1-4e4c9543d45b", "indicator--a1e17d40-298c-4ce0-ad67-bc6087c7fbed", "indicator--8d720b62-6c90-43f6-8110-b78c022c9ee9", "indicator--958ad5a1-0bc8-4fb5-88b9-82ae45e13a75", "indicator--cbef4253-8a34-42b1-ab00-75ea909d2b3d", "indicator--742acde4-177d-4d34-9e11-0b58fbada6b1", "indicator--f28977ed-a8f5-460d-af23-202bb3ad6177", "indicator--e2b87b6d-ee26-41a0-92e2-536df1263807", "indicator--c9e8cd24-d1a8-45ec-8893-387fc1dfad7b", "indicator--41ffb78f-5aff-4fa4-bf48-40f345273fe8", "indicator--3689e7ed-bc96-4f80-b1b3-c7451173e1fb", "indicator--c7d72521-cf6f-4c7a-8930-85f128d66713", "indicator--6e48cd44-3da5-4800-b678-40eaec6f9cba", "indicator--7eacb40e-1c61-43ad-9982-d47fb750199b", "indicator--e26a54e2-e3c9-4828-8673-be2199ac4d79", "indicator--b04113cf-e761-464e-869c-c813d08c0b7f", "indicator--47d64b9c-5ee6-4ea4-96f2-7c4ebeb34f62", "indicator--bad19910-3bfd-4218-84f6-4d7affc0f0a9", "indicator--e5a3e8b7-3f66-4c9d-9420-e7c31ecd91f8", "indicator--42cd5b9c-81fe-46f4-a723-d13d65a9886e", "indicator--f318b7c5-1568-4486-9482-f979c66fd67d", "indicator--2d252c5b-f0fc-4074-9db3-d95f1c86ff8e", "indicator--19723313-4e08-461e-bbd1-c92709deb1cc", "indicator--18ee6614-0b10-4fae-bcea-0111ceb0801c", "indicator--b555f0e9-5cb1-4558-8ab0-4cee30b36acc", "indicator--83554d9c-b1cf-42e0-ac1e-a1836bde13ff", "indicator--1d6f8106-23bb-443f-aa5d-e41943bce2e2", "indicator--cce4a6c2-9569-4f8b-b18a-5ceb32896ae8", "indicator--91e96aa2-76c7-467e-9fcf-c8c52e3c710b", "indicator--8279ec25-c3d0-43c5-8226-e2ec5883a0b2", "indicator--86807003-afc3-4c22-8e5a-978b078955c9", "indicator--4c7696cd-0400-4229-a1a1-84e8e52944f6", "indicator--c36c6dac-662e-4a26-bf7e-f3e86d3b68cb", "indicator--7738f304-5afb-4b67-a29e-d62c2ccb5873", "indicator--8cc715cb-31e7-457a-aec3-d5f2fdd72519", "indicator--019ed6ba-734d-465f-914c-541490c1417d", "indicator--cfc2f558-b294-48c7-bd99-d3ba8b9e962d", "indicator--de4cc913-2baf-454b-acac-aaa7d0fdc16d", "indicator--b4f14199-085a-4357-b04f-7053aae9ad3d", "indicator--5ca8bbce-8195-4ce5-a9c6-f38db11f114c", "indicator--9c356870-80ac-462c-a0d8-c696a0bcc2e9", "indicator--8f08c566-bf87-4b03-9abb-8c09af95bd91", "indicator--92ec4530-5505-4f55-9427-9a6ae8e246cc", "indicator--dbc036d9-265d-4a97-ac1f-76e56cb6421c", "indicator--5890b305-f690-44bc-aca3-e5ea6593c4d7", "indicator--9357716d-60cb-4c42-b3b0-48c681274408", "indicator--e747146c-2fe8-4dbc-8275-36b2a099694d", "indicator--7fcbeaf7-8483-41be-a16b-530d4526d6ab", "indicator--3b6b208a-1592-42cb-8adc-9bd289e31c47", "indicator--7beae1db-a207-4ca1-981f-cc7511329947", "indicator--fbc3ffb1-bdf3-468e-a3fc-36d5b82539e3", "indicator--7472b13f-3516-45cf-ac99-a46e90e8f84c", "indicator--67417d30-437d-4299-af0e-6409db2a136e", "indicator--206ab8cd-52b6-4a56-827b-f6ee3f123b74", "indicator--860e2a1e-94b0-4316-9a6a-eb9a50766cd2", "indicator--87712eb1-fe58-4fb5-83b2-df7f9e2ea945", "indicator--2225319e-b792-4846-9dfe-2120a5d35dc0", "indicator--ffc60a7f-c284-4e7a-9cd7-efa7ad8de46f", "indicator--37a832db-42bf-408b-811b-dadd9666b7f9", "indicator--6d6bab8d-3e22-4b1b-8c9b-bba1c15946c4", "indicator--0dd7c11b-566a-4b27-a5ba-a8e4dab05a33", "indicator--7d220acc-e4f7-47f0-a6a9-d7d84067cb78", "indicator--69d00fbd-8f50-42ee-a0dd-488013b7ef2e", "indicator--729b852e-cba2-43de-ac1d-cf6601d8ae4e", "indicator--340718f2-d33d-4635-95f1-3160d0cfe762", "indicator--b9f344ce-5857-4103-876a-d69d4902e09b", "indicator--81ab6088-5819-4da1-8311-03214f3ce3d9", "indicator--fcbf2d33-43d0-4b3f-bacf-aa7ed7fc0077", "indicator--df8c8f19-8162-41b9-9ca4-fdd6fc488825", "indicator--d0523a20-63a5-40d3-951d-25d24eb6c9ab", "indicator--3005d3a8-9d9c-4b10-953e-149dd81a6d45", "indicator--c70d1e27-db22-444e-be8a-765368404892", "indicator--f6477470-1982-4149-851e-d40d71f2c554", "indicator--cb100e3e-d3cd-4d46-b6cb-8bf4eec23ce7", "indicator--f5d82255-66e0-462e-be5a-3927bbdd1747", "indicator--fa3b71de-6d34-4607-8ca9-3f3eedaf20f5", "indicator--e8a90783-a7a3-4566-826e-46703b8324d9", "indicator--84f23663-6143-4982-8dfe-97aaba565efc", "indicator--0e390006-b759-4af4-859e-1c0f7f62a9ca", "indicator--4cbbd873-fae5-45e5-8e89-873f8e8cf4ef", "indicator--8d5f841f-7fad-4c4e-8f3b-0e6a94dc7716", "indicator--9e129462-09fb-4253-9d55-148fc325e772", "indicator--8ab0788e-d0e6-4c60-9884-628bd7abd1a6", "indicator--0ab7c28c-8485-4ba5-aa10-efdd1ff8823a", "indicator--3aeb9039-7829-46f9-9a7f-084e6aaa6ce8", "indicator--f1ef0e2b-8f01-4bda-ba9d-ee9518a98657", "indicator--4acfc4f7-5309-4900-adeb-b64ea61c695c", "indicator--4c81634a-fa6a-42f5-bcd7-84d32c3bc6c7", "indicator--c515b329-0b01-4d9d-9445-6cd9f71d4858", "indicator--e5a4acb0-938a-4948-a7d9-c5938d2ee1a0", "indicator--74f4e3a3-37ec-48d9-9cef-6f3a99ba2b82", "indicator--a6c9da1f-92d2-4784-9f4d-c59bc47b06b8", "indicator--05642ed8-350c-40c4-931a-cbe53a8ada7e", "indicator--40e88429-e735-4502-b601-d144ca6e9058", "indicator--ef8463da-3f19-41d8-b15f-dc319728170a", "indicator--d4a2b2c8-2c95-4607-a41c-e621d4894e2a", "indicator--ea47da57-f426-41fe-abf0-5b9967fefadf", "indicator--9887bb36-7d72-4596-a794-be06ecb25b99", "indicator--e8798cc9-786c-4b12-95c2-7dd005a4977f", "indicator--bcd80cc0-dd2c-4664-beea-84040207e085", "indicator--7936b711-0905-42eb-b6e6-a72082901e59", "indicator--b65e860c-8f4c-472a-8582-15fb0b0c8c1f", "indicator--09584c01-14de-4e8d-a793-46e95656fae0", "indicator--97abdbfa-f6bc-46da-a467-80e11e861e68", "indicator--a65df9b5-7f36-47f8-bc20-8ad2f292349c", "relationship--b527590e-c727-4e84-9ebe-c576b2c73b77", "relationship--754ddc8d-2a91-4586-8ced-5e64ad6adb67", "relationship--51b02f45-b77e-4249-8466-95da88217ced", "relationship--40621de1-1514-44cb-827f-21efb042d075", "indicator--09251ff7-3e52-433e-aa25-9e028e47a3d8", "indicator--c2a35d2e-4289-41c0-97a4-c3259a10ff77", "indicator--ee40ad4f-4585-40c4-8176-5e187995865e", "indicator--4fc00557-902f-4905-b67a-81b0ffc77f17", "indicator--d60a42dc-d7d6-4a43-90a3-d07253717620", "indicator--4f6d5dbd-11bd-4633-b729-c57b9b8ec041", "indicator--722d0189-f5d4-4605-bde5-006b45f7415d", "indicator--2bee8c98-32e6-47ab-8358-0d55ca97fdc7", "indicator--3a62e126-b34c-4c6b-99e9-5aa34d4eda1a", "indicator--a8511498-63bb-4520-a7b5-e9885bd99900", "indicator--a9bcad40-4712-4e9f-a6f0-b0f9cca069ce", "indicator--69b79676-3270-4601-95cd-b6b84c47a3a9", "indicator--886eaaaf-5552-4acd-800d-0d16e049d090", "indicator--15a88bc1-4038-4630-a079-f04be1c33e54", "indicator--f2d372d6-1b45-41a8-b1ed-bce584597d61", "indicator--0dad34dd-7a1c-4046-b19c-9b69b2dce1ef", "indicator--553c4738-486b-4248-a81b-fe47a94ddcd9", "indicator--725094a9-bb3c-43e9-9908-2ec103488c3f", "indicator--e069a064-558b-4c92-aa0d-5e497300b4da", "indicator--1e2b1d09-c9bb-46a6-ac53-4d52f6d5dbdc", "indicator--51416a04-f785-436c-bdac-bc139f1376cd", "indicator--609dadc4-e036-4110-afe3-b47488415718", "indicator--f7fe22b8-cb5f-4e43-a105-9c64dba027af", "indicator--203b3a6a-7f87-4ecc-879e-7fe8a3f69513", "indicator--e58b2797-42f4-45af-8660-32cfe34289ab", "indicator--8548a144-0805-4773-b381-2078ff162dae", "indicator--75d0cb02-8046-477c-8178-1495b5c727e6", "indicator--dc061527-d138-4e5e-9804-0bf1f32a7fb3", "indicator--11e92632-daeb-4a77-85f9-365477d6d7c1", "indicator--c9c14870-15e1-41e4-9b99-e759b880e2af", "indicator--ff3b1b63-47c1-4935-ab97-a3d8a0b9ce04", "indicator--6c9492ed-ba16-4d61-b8f7-81ebb3a0dd56", "indicator--1cd683c9-4135-4e0a-957a-4476caeb715b", "indicator--43d968a2-697e-4264-bece-ed163550a8c5", "indicator--73a2b68a-d388-4fd9-836d-945e71dbd3ff", "indicator--6ab80176-74aa-482c-a229-90d36ea0ea49", "indicator--7807b0a7-770a-4caf-aac6-5e31da46d6d8", "indicator--441ad268-06d3-4d8f-a4e0-b95652b14423", "indicator--779b2cf2-0f20-42d0-a8e6-1e1a07dd3b63", "indicator--49de56e7-581e-44fe-a303-3c8054785c0a", "indicator--7f3081f4-e8cb-4a41-be2f-4234b3a3366b", "indicator--b97b7990-b926-4648-897b-a2150ad03145", "indicator--adcaeecc-e5f4-4660-859d-ea011dbaca94", "indicator--ce944a67-96f9-4c29-938e-e88c849990bb", "indicator--fd6fdbe7-ff1d-4542-b827-faed59a52328", "indicator--7f2a387e-cd4a-4dc9-87a6-8b1fede7dd4f", "indicator--e1c7b328-92b1-43a3-af2b-5fab80895dd5", "indicator--d0c02584-b12f-42b6-88c5-351901882130", "indicator--af29ee55-b887-4609-b3a9-748791d55afc", "indicator--c5d32b95-ad90-469d-ad22-f8029a371943", "indicator--4c534e8c-8a6d-4c54-97a1-c4beacb88240", "indicator--c0d2732f-1bbc-4c24-bebe-26be9ba836ff", "indicator--c6a1c1b4-2b9d-46be-849a-72a9dc28a36b", "indicator--e87ac026-e389-4f41-93db-aeb94d566490", "indicator--30152e1f-1fc4-4785-a2aa-f28b30ac14b0", "indicator--dcdc056b-b352-49c4-9f13-c184fc80434e", "indicator--a591bd6c-c4d4-455d-914a-dc9ef31aa448", "indicator--8099829e-c541-40aa-bd6f-08d08f7c7a09", "indicator--d0ebe0b6-8563-4599-832d-2e14a1f3b0b8", "indicator--e0123233-7902-46ca-90f0-1046041fd0fb", "indicator--0842a14c-bf37-47f3-ad1f-cb815b6e6edd", "indicator--657785a3-b4a8-439e-a1f3-2ad3b5793251", "indicator--ae466538-1c4c-497e-ba66-c9e079392e83", "indicator--6334fb10-1437-4718-9cb9-15b15d19b6fa", "indicator--186b77ef-17b7-48f8-b47f-09173f861ea9", "indicator--d2f4fb00-b3e7-4a08-b5f4-50ef21607270", "indicator--11b8b898-fc2e-4cae-af43-79b08cd5cbb0", "indicator--4559b071-f9f3-4e92-b46f-1fd3930b67bf", "indicator--feabf009-98d5-4236-b08a-70350c91923d", "indicator--7277a3df-1e2b-4b07-ae81-22b6e5189dec", "indicator--a17a3376-f365-41b1-9c35-1d9ad2a63e4b", "indicator--382e4d27-b6f4-4b43-add3-9e5c6d557ce8", "indicator--740c61e7-af32-40a2-a00e-3826a47cfa31", "indicator--dd11da77-f6f0-497a-8179-3910bcf494de", "indicator--04470262-d41e-448e-b9a8-aba7c18398de", "indicator--213ccab8-f291-4d6d-af98-a5938a35c07c", "indicator--a230f474-dc68-417c-8070-98fbc08acc2f", "indicator--8cfc5b7c-d1e5-44c6-b925-08414a8cce16", "indicator--5ce4241b-0f97-431d-82f7-6f1d0602761f", "indicator--36e7bee2-5a9b-43d1-9517-bf0f90b4bdf7", "indicator--92e9eb8b-c7ca-46bb-aaf6-81dca9758fb7", "indicator--80cc0c0c-31b1-46d3-8088-a57d963304aa", "indicator--dc5cb80c-d3da-4688-a3c1-616cbb143aa6", "indicator--fbe336a6-d017-4ec3-a5d7-8057e0dee7af", "indicator--49b8fa71-d650-4b63-a0c1-4fbd28cf4ce6", "indicator--7af3b231-b40e-4f23-b6d9-3fad96f9f470", "indicator--b1211ec9-8be2-4a7c-aef0-fdbda8a5c47f", "indicator--dff88818-1f07-452a-8c6c-398672fc7d55", "indicator--409bd5f8-77fa-43c1-b3ca-17d831c1b724", "indicator--2237d773-6f84-4c8c-b501-1ecdc1143c82", "indicator--8cbd3b02-7261-47f8-a141-bab931adac7b", "indicator--7b0a9014-e222-40b1-ab3b-478b37123113", "indicator--9507b996-50c5-4d6b-a3df-093143a46642", "indicator--25b8e69f-6e59-45d3-9b8c-7b6526a3df13", "indicator--4099bc14-8add-496d-8e17-ae03e8a471ef", "indicator--e7194818-6113-4fe3-8b7b-9f1ffa825a2b", "indicator--35980afb-8011-4a5a-a7f4-2a0fad899b69", "indicator--e00f3ca7-f56d-45be-bbcd-af88e3ab250e", "indicator--58f1db0a-4938-4c2c-a141-52eb37950d1a", "indicator--da05b906-5122-4e55-83ee-ba9fbec23405", "indicator--dfb600a8-182c-4f09-8bc4-4c7fc6a47bde", "indicator--2426009c-dbe6-4984-a60c-4d2a369ccff1", "indicator--85c06c08-356d-48c6-9764-b57fcd277518", "indicator--fd8d08b7-9778-4cfa-b1cf-45d7b60bba31", "indicator--c9ab8428-0a85-494b-b801-f02ec225d4b7", "indicator--8b149b2e-7e6b-4643-9021-ce5806b0e10c", "indicator--b6a327d9-37bb-44af-a2dc-24c9ed3f294a", "indicator--f0bd3502-6471-4895-b15a-5a43d16dc270", "indicator--4ed6613e-f8a0-438a-b8f6-1173a90b1c63", "indicator--6895ebb9-685f-44ec-a844-e1b724e7ad52", "indicator--67627644-02b0-4912-92fa-8d5e506095f5", "indicator--ef9777dc-81c5-4953-a445-7832670bafb2", "indicator--55cd2425-7dcd-4de0-8001-9be2c8e5c4d2", "indicator--dd164e7d-ec7b-4b87-afa6-e39a63b5e567", "indicator--08321a96-4c4a-4d0e-883d-b1cc7a9502c2", "indicator--45c1de9d-932c-4bc5-b536-0f27e227dc13", "indicator--0b7b1988-57e1-4814-b950-5d9bf56e14a6", "indicator--926dfca4-0b07-42b4-87f7-bf88c5b3b153", "indicator--cacc8069-e30c-49b3-8ec9-dfe17c213a08", "indicator--f81e9139-7a4d-44dc-8af6-fb94a5df23ab", "indicator--da02cb73-9a11-4c9c-9f78-8b2485846c03", "indicator--c596687c-658e-4a81-b891-02b746cc2807", "indicator--7656eb06-0d31-4c1c-a756-de00275ba8d5", "indicator--44b75bbb-0572-4044-a4ad-f253c38347ae", "indicator--fecacade-666c-4386-83cb-bcb32be63d45", "indicator--a654ad2c-0270-418a-a5d9-241fb7318276", "indicator--5e7b1994-de75-45f2-8684-0b7ffe2175b1", "indicator--691d82a8-cb6c-4865-8806-be2e83553708", "indicator--fb06da74-0de9-4131-b405-720f9d771a25", "indicator--5b843d71-bedc-4dd0-a8cc-5855462f2646", "indicator--b6cb92b6-f544-4bc9-a44d-c9aae978e5f9", "indicator--920a75f2-fad3-4b28-a195-8c84ab438a9c", "indicator--e2c9eecb-b039-44af-b161-a58d516bd66b", "indicator--83b7e1ef-2da2-4856-8a18-f69faa563d0c", "indicator--57072264-d6c3-406e-9042-b80834150703", "indicator--763d1a1e-3414-4209-9ca3-2b201f2b0af5", "indicator--cac42cf5-1cf5-4ea5-b4bb-2949859f733b", "indicator--ec88aa9b-0af2-4029-8daf-93fcc0b73e35", "indicator--66ff7916-bd22-4bf1-8388-f8251139a91f", "indicator--43926f72-4e63-4498-adf0-c2fbdbb20d8c", "indicator--ac7a0758-7fd1-4b23-896c-0019d2375024", "indicator--b6a1a997-514a-4196-9d00-1c7e89cf4020", "indicator--13032727-1cd3-4966-97d1-527d3cd20fc3", "indicator--53a1159d-f185-443f-99a7-14930e0c89cc", "indicator--7a55d94f-a081-487b-9633-2a6225a8fe2e", "indicator--5e03d117-35f3-43b1-8513-7c5f32cc8195", "indicator--f4efb328-5443-4d76-a9fa-6dbaceb803f9", "indicator--af096dde-9de8-4751-93fa-e70bab950b18", "indicator--90990850-8aec-4abd-a2d5-309b0b908d94", "indicator--cdb68ca4-3c8b-4fbd-a804-245397a348fe", "indicator--0418f895-72df-49a4-91e0-1612b93009dd", "indicator--6eacc43f-f6ba-43e3-9f7e-bb84bd558900", "indicator--b2c34f28-327c-493a-a996-66fafb1fbc8f", "indicator--be27551b-ed65-4500-aa47-c57452a91218", "indicator--ee686a93-16bf-4c29-b035-69e3e59a573c", "indicator--5895e8e3-8a3f-4c2f-80ad-33ca664790bd", "indicator--6b55d69d-528d-40b7-8efe-4a3771ec23a6", "indicator--c95321d7-efa6-4f7f-9a56-f8eb6fbaba00", "indicator--286ec209-4853-46ae-8132-5a183dd71577", "indicator--ad62e999-ae61-4229-a3ed-ae37c86da7e1", "indicator--b24c3e72-c84c-4c6e-abb6-5186a792bf83", "indicator--951d2314-7afb-4154-acd5-6e07ab536673", "indicator--1ba91144-9304-4d13-8363-57685c1dc4ab", "indicator--810a323b-ecb8-4832-b7bc-d8623478c4af", "indicator--bdd9d7b4-a4d2-4030-bfe3-fb84d7c6e621", "indicator--efb38da8-9397-4fed-b543-9b0f836a271a", "indicator--1b048bdf-3bf5-4ef2-ad10-1d7c8900e3e8", "indicator--7993559a-7a34-432b-a75e-5769ed651f46", "indicator--b4f6434a-8192-4ec0-b065-ac280348a47e", "indicator--89a9aed1-4bcd-4c39-9970-150fb01ff27c", "indicator--d5b75baf-a037-4246-90b3-245e1656c1a7", "indicator--8a28b195-5e8f-4203-8029-6b0a79348a69", "indicator--d037eeb9-e7af-48bd-a900-3bea1192d40e", "indicator--a97a62c0-31fb-43d0-b42e-df90e470ba9b", "indicator--293ca1eb-c2d8-4cb9-8982-76afe9968757", "indicator--4b9a4f33-3ee1-44b7-8dcc-6550dabe3061", "indicator--3f2cab00-4d11-4630-b328-0d4826ba4c11", "indicator--2df082f0-44a2-46bb-9d64-f50430d6a47e", "indicator--b9ae6724-7075-4479-af21-7ac32a14a7e6", "indicator--cd918f83-017e-4f9a-acb7-8fc5ec826e35", "indicator--46e1587b-b929-4680-982b-e7910acb26ff", "indicator--6a497336-7c7f-4743-aba1-b5990c3168ed", "indicator--186ddb51-a6c1-45e8-8c6a-5d9ba9f86c39", "indicator--03eca8c4-82ae-42c2-a71b-1e7b58b7723f", "indicator--4896fa29-f78e-46f2-a99e-253c06f42244", "indicator--8d03f81e-1b31-493a-bcb2-ee565065383e", "indicator--5be34ece-bcfe-4775-890a-8c1612fa00ff", "indicator--4039a8ac-ce46-4440-a134-0232477c55c3", "indicator--8eee94b2-c8aa-4499-9be7-07da152ab7e9", "indicator--e32461b1-6ed3-4f16-ba58-5e6aaaf4ee78", "indicator--8d62c8b6-b2ce-424d-a47c-9627bb193d42", "indicator--19dd7d3b-abf7-485d-a37d-06fc6da1ea29", "indicator--dfb9e693-1828-45ee-9c5f-89b2b3bd543d", "indicator--25eca3c8-80eb-4b7f-80dd-de451b1f00cd", "indicator--5513a6e7-e584-40d7-b5e3-6c930c9ae47a", "indicator--0082884c-9544-4b8b-bf77-6bc121222b28", "indicator--ceda3290-3fb6-4264-9e40-037f94b943a4", "indicator--43acc7a6-7145-4a87-aff3-d3eb92fef2d4", "indicator--f69d188e-be44-4321-8581-9e9abc1a8280", "indicator--887d92c6-8ad9-4b94-a370-03687b5c69c7", "indicator--9d28ae39-4d81-46a6-bb2c-d95af617473b", "indicator--69068eb3-7f1b-48a1-9967-ed6cee330382", "indicator--290caee5-0d8b-41d9-8118-b0df97c147da", "indicator--a9612c5d-733c-4248-b94a-61185f8faf16", "indicator--12a40595-7847-4f6d-9085-710eeefd4463", "indicator--f15d3d9e-687d-47f1-a73d-f0d9c47b1988", "indicator--270f67e8-05ec-406f-9aeb-75e121f05651", "indicator--315d4388-3daa-461f-9b79-b3407de2268d", "indicator--ea5ea46c-5520-4628-8925-cb822e4e2c13", "indicator--126500d1-c51b-476b-8632-71a0d323f30f", "indicator--67266b52-749c-45e8-8a86-9ee5421c8862", "indicator--669a41a9-a3f3-410a-88f8-34eaf4f265b1", "indicator--272dfe15-18f2-466d-8258-6c6045eb41a5", "indicator--779e0a66-d20e-4d79-9573-ed179a2bf058", "indicator--e592ae46-a267-4713-b928-5029c8e0cea6", "indicator--4f177aec-1cc4-4e94-ba9d-86ca4d5a72e2", "indicator--81264a61-d112-4cbf-8f8f-c06ba8c84101", "indicator--8910c654-91f6-49b1-b9f5-15486a9343c9", "indicator--2d6e509b-2303-487e-a6b7-0202cdaef2db", "indicator--64a5e992-1d1f-44ce-ba8f-75ced4a3aaf5", "indicator--d3982d03-fbbf-4fdb-b9f4-4dec5cef4b8e", "indicator--025d0daf-445e-466c-9876-81a0331cece6", "indicator--e116e2b6-ca7a-4dd0-b7ff-5eb4f4de2e40", "indicator--5bbbeada-359c-40ef-b718-0785f35449b9", "indicator--97754f38-d123-4cff-8726-43bf53772cda", "indicator--86330180-5cd9-4c4d-a9fb-f21ce96fe5f7", "indicator--867ae4c2-a19a-4a53-8b67-dd436bfe283f", "indicator--2aae8f5a-928b-4018-baaa-12ddde4c7265", "indicator--31a9d94d-158c-4d1d-9107-83256c6354af", "indicator--848b5d64-a1d3-4088-88cf-0bd60af35ab0", "indicator--c6587b71-dcdd-4297-bbab-46d1e216e085", "indicator--ea776dd7-c442-4287-a44a-1a2e870b7eed", "indicator--92fb192e-85cd-4f04-91b2-14798f1ca0fa", "indicator--1dbf7340-451e-49e5-9e7c-c9257b1972b7", "indicator--152268c1-ae10-4e7e-868e-7a6b9844bc3b", "indicator--d0dd7a4c-71b0-4c46-b788-a5781ada14de", "indicator--ec8028e7-d063-44e7-9f1c-3e546c564f10", "indicator--4248bc32-dd63-42f5-bc1f-a20b4a1c8d9b", "indicator--d48ee236-39cd-41fd-83ad-d66d0b42187a", "indicator--19002b70-832d-4716-94a3-c0a6c80a26e0", "indicator--3c7f26dc-c29c-4644-bb13-cfe4b6101d43", "indicator--ef73b67a-78f1-4522-862d-28d2bad2f7a5", "indicator--abc60762-4993-4f5e-afcb-77e6aa87b4f6", "indicator--b831c928-b5e8-4c06-9a1a-1a9e2ada936e", "indicator--a87536f4-d85e-4220-8d9b-16b6f7447142", "indicator--2b190711-e893-45f4-90ed-c56a0b59588c", "indicator--8b77d0ec-96f4-43cf-8728-30186e482906", "indicator--7c347508-3eff-4278-81eb-4a25f9c31d5e", "indicator--0f34871e-8e73-408d-9c4a-3ed2adb742eb", "indicator--bcd51a4f-0078-4de5-b733-7b8df5678ad7", "indicator--0c462184-4c57-4ad9-bdae-cfc3febee7e0", "indicator--8b98e8be-8ac4-411c-90fd-5938f280ff78", "indicator--be876a06-d732-41c0-9e81-fa5702c97a4d", "indicator--ce548534-e31e-4bc6-b750-905c96e22012", "indicator--43038bc9-2063-4c6f-b700-1ff40ce56793", "indicator--70c7609e-e7a8-4931-9c39-23f0c0015b49", "indicator--65a033f7-07dc-46f7-97a3-10f2e12ed79c", "indicator--6fe30ad7-c343-4601-bf80-a5a5b5654adb", "indicator--ab5b29de-ba0f-4608-9bc6-1185442d9ea6", "indicator--e029b0b2-f8de-48c6-bd14-752a758c21ec", "indicator--537abec6-3fed-4371-a175-b06ed6b806d2", "indicator--a9540d28-5faa-4b7e-8421-68b8f3dc74a9", "indicator--290ac769-def4-413b-b045-c9f580c2bfbc", "indicator--3df56720-2165-454d-aaeb-f01bc0cea2be", "indicator--81bf1364-4e1c-44fa-9742-c8f19fbfccb2", "indicator--8829d738-34a0-4a96-b29b-eab1ddcc4f68", "indicator--986a5d90-57de-4abe-a992-51491d8f167a", "indicator--1d1270dd-c963-4620-a98d-2448482ab958", "indicator--fce0936d-9af3-456b-b9c2-13187cc0744a", "indicator--bbba52b6-1b2e-4275-a879-10d7ab54009a", "indicator--9af39c5d-18dc-4516-8a67-5843e53cc6ae", "indicator--68c79128-4d26-4933-a16b-9b751ce9b09a", "indicator--6a6dfb78-f7b6-4ee8-b471-fff2069ccfe3", "indicator--7394705b-c6f3-4af3-bee5-a344701830bf", "indicator--e6bdf1f5-6a0d-4117-867e-03fbc6d244ff", "indicator--51e4545a-680f-4b3a-b773-5f074577eae3", "indicator--8d1a221f-f03f-439d-acaf-cc70807fa5fa", "indicator--81c541aa-9206-4e06-8a34-dc7c278d4245", "indicator--81dd4941-4834-4d96-9497-9e55952d2940", "indicator--f5d8a1b8-eb64-4b65-921d-ebc2ebae890c", "indicator--b1e71427-f207-4d3c-90df-c9ad4593a21d", "indicator--4bb49c76-16e0-4f1e-be6d-c11b5208d8e8", "indicator--7487a829-6f10-4d31-b1f8-9bb78e530920", "indicator--e725f2e4-a688-4186-a929-136f8aa52f94", "indicator--191396b6-7466-4522-9a1b-b020b43ee37d", "indicator--3a1efe15-7e0d-4835-b5a1-4e21b44c3f16", "indicator--173b962a-e497-4d3b-b0a7-61646436996f", "indicator--0be53709-dfd3-44e5-a94e-6e7d76ab937b", "indicator--ba75f204-9e27-4bea-9e8b-744cd7878e59", "indicator--8321f72b-d152-4574-9d55-465cdd0b532c", "indicator--81a14e37-a8b2-4cd9-8fdc-e44e352768d9", "indicator--39528d75-faca-44db-9b3d-7dd1f6c898f4", "indicator--990595d7-fb54-4a29-9c86-4c0ec2e2cc8a", "indicator--764d56f6-9c96-4546-b224-592c10c09d01", "indicator--84a0de01-2a5e-4f1e-aac0-6001fd8c97ee", "indicator--5f3191d1-87ed-4bc9-90ed-e664039bd83c", "indicator--2e24f383-9fcc-4507-88e0-49206654e91b", "indicator--ab107746-c321-4db7-a0ae-a7d710ff233e", "indicator--4f11d761-60b4-4784-8a94-3dfec1e02b25", "indicator--f1254d88-4958-43ef-b799-c2d7780ebc2d", "indicator--cc21c5f2-1aea-4039-aded-5c81ea85d254", "indicator--98bef820-d4a9-4d52-adaf-18d76c829bfa", "indicator--9512bae8-544f-442f-9449-5a5702414df4", "indicator--c434fc14-d56e-4ada-98db-9852615ffeca", "indicator--3a02ef21-715a-42b6-949b-773a22cba648", "indicator--65c879c5-596d-4854-a031-153a5d520cb0", "indicator--77628c2e-0bce-451b-89f2-085404fcc4cc", "indicator--a72fc4f0-e764-43d5-a05f-c907150eaae1", "indicator--e296d113-1e26-4dd0-87b6-6774a78b93e3", "indicator--58ea3430-fc1f-4697-b504-23d231f80c29", "indicator--bc30956f-310d-4dea-ab7c-083a1643fdb1", "indicator--5b2b1494-0153-481e-b1c0-7eee85368bce", "indicator--07267641-fd26-41f9-9f5c-332721a27058", "indicator--644aab68-b454-4197-945e-92e728a97594", "indicator--92ce748b-a244-4df9-8c68-67d40fdf873f", "indicator--40e0c45e-06bd-4882-b3a8-960b7a1a8279", "indicator--feadca49-7019-4212-aba7-56f98563c775", "indicator--51501823-513f-45de-90d0-94c7fa690d49", "indicator--9db17b98-a854-4ef4-9a4f-503ab920c9d2", "indicator--181a83fe-d877-4ce5-ba8d-f5fb00ee7ba5", "indicator--30c1d93a-8d7c-4624-8712-613cd6648523", "indicator--8901c242-1655-41fb-b36c-8532e5efeb09", "indicator--09a5aa2d-39ca-44dc-a9b5-f0554b092a18", "indicator--f4a0749d-1698-4dff-991c-4fb21559d5dd", "indicator--91db08af-3d0d-49a5-a667-0fd3dff80116", "indicator--0a407b39-dafe-496d-a169-b26089170f6a", "indicator--9113bcae-98f2-43ff-afd5-1363dcbee1fc", "indicator--86e1046a-7049-4fe4-8a77-f1026481c8e3", "indicator--c44064fd-c67f-4e16-bc44-2ac722b4820f", "indicator--63e1a8c5-4136-4689-a4b4-437a7080cdb3", "indicator--62dd453a-0da3-4b85-9cca-53709d7af639", "indicator--d3c05178-7414-4ebf-97b9-4e7d0d196b7c", "indicator--bf29d0f0-abb3-498e-add3-5b6bb43ebbc3", "indicator--42f41d49-ca63-4052-bfb2-5eefae35804b", "indicator--2bcd4b52-c5ff-4aec-b976-7d505f10ce66", "indicator--0f758dc5-3430-403f-b660-a5b279bbb139", "indicator--f939e908-c11e-4478-b8b0-0831aec70181", "indicator--8b112a27-e540-4818-befe-0216558ee71b", "indicator--57b61b2d-5a7b-4aed-931c-b45adf46d718", "indicator--53b68928-9140-425a-bf7e-5c9c81af357b", "indicator--8c1c117c-ca20-44a7-97df-c31e8b96cc92", "indicator--68256305-8985-4ad2-a30d-529a75c3d674", "indicator--92e23911-8ac8-46a0-ad26-1e6587134342", "indicator--f8331611-cf15-419f-9ec3-252b45eabef3", "indicator--1a01312c-ab74-4b98-b9e8-4be3bdf59b1a", "indicator--11030ed6-a59a-4ed9-a52c-b4d55cb1fa20", "indicator--65997cc3-1f6f-4887-8f71-1a513bb36783", "indicator--0db0cbc1-0ea7-4951-9889-0523b2b095f0", "indicator--5a48fe41-3217-4809-ac28-88d057e70192", "indicator--c3dba5c1-3297-418b-a096-810cf7d99780", "indicator--d79bab5d-a363-4fa5-97c2-c3f7e41e9d5b", "indicator--771871c2-9119-4704-813a-52f9d1cea8b8", "indicator--f634f73d-8b1b-4b00-843c-c6d2bcec445d", "indicator--4680111d-219b-4805-b4c8-ea0a0fd48b9e", "indicator--d9ec407a-e97c-401f-8a1b-3e9de83a4dfc", "indicator--768be84e-8a9f-4779-95d3-c7126049cc4b", "indicator--5f118f07-2c3d-4c81-b10f-dc189c212e9a", "indicator--c68b1704-8fbd-477a-9a89-120e3267931e", "indicator--b67620ae-8590-4201-b8b1-fd1b8de4cb4e", "indicator--26197131-cdeb-4409-8277-7eecd0ec6445", "indicator--420a0398-dacd-48cc-8911-38fe0f208077", "indicator--144ff69b-5f2a-480f-9b53-017429f02be4", "indicator--1adc8508-0889-4e26-86f0-365115c48199", "indicator--64bbea01-ed32-486a-8e51-e0c0a76fbeda", "indicator--6286650a-b84a-4c11-92dd-e335cf017c60", "indicator--a2d740ac-fed5-4ce0-8966-28c6ef7807b1", "indicator--e7f600c4-67a2-45f4-a8f5-16b2cfce7d14", "relationship--a5e8b95b-a483-43a3-9adb-18c15b9954fc", "relationship--6905fb03-6ee2-470d-af39-a852ea3310d9", "relationship--14cdbb8a-41ed-4d6b-aa06-3212e0b8c888", "relationship--d490f1e2-e93a-49f9-bb32-1dea0f14e56c", "relationship--2135c34b-b105-46f6-bc44-40ca0166657b", "indicator--9e1fc8f4-7daf-4091-91f9-bf1d16b59465", "indicator--82110017-f8d1-4e17-89de-811325207dbd", "indicator--de8de283-ef66-406d-bacd-3f967f3b84fe", "indicator--5bdee662-d9da-4e1c-a888-bdcca027c4a0", "indicator--cb74c5b8-3a2e-4e4a-8274-977e98438d99", "indicator--8d632199-11f9-49ed-9c6f-ebbb8ccb8f12", "indicator--e47f93ef-09a4-45a4-8fe7-a277da4b00cf", "indicator--ff08d791-2d63-44a8-97ff-58105a729681", "indicator--7ae438f6-411b-46d8-81d3-9b7af1c641a5", "indicator--3724c66e-9531-4703-9cb2-0b3531f21dc5", "indicator--fc3fe9cc-3c4b-492f-9316-be8b13b0483a", "indicator--7bb7498a-204e-4d84-947f-d3f762f25da4", "indicator--5e591370-97a9-4e01-863d-644638820013", "indicator--47d0e585-8b79-4f9a-a6e8-36743f4fb2dc", "indicator--f76c0324-ec83-4881-91b5-6f774c4dc2a9", "indicator--1d9022ec-eabf-4adf-9c87-8f2224403d0f", "indicator--b877aec4-2197-4937-aec1-c655655a1bb6", "indicator--05bf5b87-42fc-4dd4-ae89-ebb76ca00c0a", "indicator--7aaaa3ac-7026-4535-a3f9-6766682c3bd9", "indicator--8b035c89-24d6-42ff-b59d-7230671befee", "indicator--79d98645-c9bd-4d78-861c-798da11189fc", "indicator--91699486-bd71-4511-a9d6-560966011cf7", "indicator--6331f0de-ce0c-420c-aa1d-0510606a1b8e", "indicator--5ea62564-e330-4165-aa96-ed46bc09a651", "indicator--ae497651-0ca5-4fe8-bf53-c2b7b37c65ae", "indicator--9973bc68-cfde-4343-9c95-af36bf22150f", "indicator--6fb7a632-97a4-40c0-8e02-b5052f0a909e", "indicator--e891b071-c25e-4efa-b9fa-9f9b61a0ed66", "indicator--e7b36b7b-1836-4d8a-8ee8-99c883715cd4", "indicator--20be5a2e-13a4-4291-b7da-6903e9977830", "indicator--0879b43e-9707-489c-a03f-05f6768a2cd9", "indicator--26edc584-956c-4adb-88f7-ccf5ba307ed2", "indicator--f1913757-243b-46fc-8f87-73c73459b331", "indicator--3161a544-3deb-456d-bb9a-2721e4eac6fc", "indicator--ae83f539-31f8-4152-8c1e-c6f6b9711303", "indicator--efe412cd-7d80-4617-9055-e51c43d8125f", "indicator--da47038b-43ad-49dc-a29a-9288814ccf7c", "indicator--fc3a92b3-2f05-4c74-bbcc-65af87acfad8", "indicator--8a9f25fa-44b6-40ff-b334-fece02ea8e09", "indicator--d40c627d-93c3-46a8-8a90-9220d078832a", "indicator--6f592345-26c2-4d42-bbfa-bdaf4679dbd4", "indicator--5588803d-dd85-4214-9d1e-589186231658", "indicator--8b399bf5-bb8a-4eae-95f8-486cdcabed3a", "indicator--45c2dd50-5d33-44c2-8825-125d4dd42507", "indicator--4175379b-1a0f-4b54-a922-a06f42c8cb03", "indicator--31e746e1-542f-45bf-b770-5b0e84ce80a6", "indicator--2dd08eaf-25a9-4a42-879a-8f0ef08018a8", "indicator--74ce8f0f-afed-4914-af74-84316799da6e", "indicator--1be7e632-3a85-49cf-a10e-354fea26063e", "indicator--320dc48a-9852-41dc-98e7-2347100e12ec", "relationship--4b7d28e1-e0ca-457c-accf-96971407dcdd", "relationship--4c21fb82-1ea4-4187-8b2c-c009059d68d6", "relationship--2bd9fca0-b1e4-4fa8-bbbe-34cb588fac8a", "relationship--d47adb6c-0248-4998-a955-fa8e6f4104cc", "relationship--55fd0722-4285-463d-907a-0144db4070b9", "indicator--069313ca-22b5-49ae-9b08-d3024af5f381", "indicator--0f846262-e7f9-47ca-a30f-c1ef75c7f7fc", "indicator--8fc8b259-7c49-441c-871a-b60d327b8a8c", "indicator--cbd0f891-d396-45e7-b0db-2b92d6de4a37", "indicator--ed5e7681-f014-482f-9108-1f9af5cab43d", "indicator--6de43a6e-ceaa-44b7-a763-94ca1e679ba4", "indicator--54df5497-86ef-4bc3-8075-deb2521d89be", "indicator--991b613a-d6da-45a7-b455-e6483539c9a2", "indicator--55c16893-7d89-4385-9f70-0711f7be4386", "indicator--a0d330ca-bc55-4037-aff2-f66fb5ecdef7", "indicator--58fd228f-6bb7-4477-8d9a-8b0bc22ad6f6", "indicator--43252102-ccf1-4e07-9edd-b3be31d106a9", "indicator--c2a22117-e942-4d35-a980-78d71ebe2539", "indicator--dbd2b98d-dbee-462b-9fb5-df60963b9895", "indicator--983cc818-4111-4dac-b6fc-f5111970bc34", "indicator--78d1cc09-98b6-4c13-909e-a0d2dd51f50f", "indicator--19160c8b-f2f9-47d7-8416-c0831c68868b", "indicator--66c8471c-bad3-4394-82b1-ff80747fb927", "indicator--2da90921-e57b-4158-8745-3e1759c40c0e", "indicator--8a606654-ae91-40ee-be6e-6c76d586e4b7", "indicator--85f67759-3a1a-4ecb-af75-c70bd7a8fb88", "indicator--b6b1a45c-a15f-4b8c-ad05-5a835b01ad38", "indicator--1d9a3507-44cc-4341-8d1f-8d05f09e3e37", "indicator--9265a39e-6b67-4bfb-a655-5306d9fdbf9c", "indicator--dff4de22-1f34-48c0-961c-32abe40b81f9", "indicator--6fc95afb-b080-429f-aebc-c6265af3fde6", "indicator--ffc85620-8670-4ee7-aadd-a4eaebbf6e12", "indicator--8a05e8c7-8fb4-43b9-a8cc-83daa6462a39", "indicator--32adb6bc-f5c0-4220-83e7-ccfb440d40fa", "indicator--f603ba4a-9469-49e4-aca4-c29e1fd9fecf", "indicator--77ae812b-a57f-438c-8626-0119111e053e", "indicator--1aded383-47a9-4b6e-be2e-5c62dc188972", "indicator--43ee92a6-0b05-46b7-bea2-37f91a82f742", "indicator--71adba32-350e-4413-a210-c6e421875bdc", "indicator--73c16d45-c322-41cf-bd7d-3ca8658928a9", "indicator--a09af3de-b631-43e3-b3f4-3d15f6606096", "indicator--81609036-5ea4-4508-b2a6-ab3b755effbd", "indicator--bf2910a5-7afe-4fe7-b114-110ee7f6a301", "indicator--0af12ac7-f729-4dec-b423-c0540f7f9654", "indicator--459c0630-016c-46ab-aea2-e43fd6f54649", "indicator--26449ccc-8dfd-4710-a082-142d26cc22e6", "indicator--40503b4f-18e0-4026-bf7d-aa0619495f5c", "indicator--05b1ff6f-82ae-4da7-a1e2-80bce03d64e7", "indicator--36292c50-e4dd-4180-bbfa-b7649b9e2ea4", "indicator--2faa3dd4-ed1e-4987-8ae8-012c24de9f0f", "indicator--c412ecbb-0717-4531-8346-81d1721a52a5", "indicator--9d64a4bc-b64f-40da-a19c-356a711eafad", "indicator--04546c90-7191-414f-a670-663e097c9d31", "indicator--598ebae6-cbe7-432a-bd42-b60c30962937", "indicator--4b034b59-64ad-4057-a78b-383c387fd339", "indicator--e23a32ad-b20d-420f-8852-9553dde7b671", "indicator--b46354ee-d138-47a3-87e4-9fa10615fb61", "indicator--695c30c3-35c5-4617-95f7-7564ef9f1521", "indicator--14bd29dc-2d6b-48e6-ba81-86aac8bbeb93", "indicator--9229e43f-0bcd-4938-95ff-04cb3d007765", "indicator--a8668c01-b7fc-4fee-b120-a34c39d1e111", "indicator--8d3af246-0685-4a22-b269-02d104d32d37", "indicator--4145bea1-0b8e-49de-975d-a94131a6fdcf", "indicator--53183c74-1d03-4907-9d96-4335c13a707a", "indicator--69be109d-a45d-4f0a-a0cc-fe6ed9ace91f", "indicator--e162460f-c901-4cc0-9223-6f7d14610a9d", "indicator--1842717c-2458-49a5-974f-1cfa3977cb34", "indicator--b1fec7dc-48ba-432b-9c34-62dc737726f5", "indicator--094da683-3970-456c-b0c0-994dd28fdc24", "indicator--a4301673-fc1a-4de2-adc0-4717e9b00b40", "indicator--9dd32f61-07dd-4b14-a375-b0ed3fd25f04", "indicator--de8d39ff-1a8e-4d62-b896-949c25dabc20", "indicator--4921e2dc-ba4f-483e-ac2d-5c56194b7fea", "indicator--c358e1a9-d7d0-46d7-9ded-2340f6c598db", "indicator--f03a0989-ccbc-4465-babc-6e190854693a", "indicator--af22767d-f469-4d34-a665-64352147ccfb", "indicator--d4cc76ae-3672-407f-b0bb-73d82c44252b", "indicator--c170b7d3-facd-4f6c-8512-0fb170b2eeaa", "indicator--e8503268-b40a-4d7b-b20a-0a016fdff49b", "indicator--31babf95-1475-4699-bbcb-83fc0a4a29a1", "indicator--ebabf63b-c489-48ad-9216-c7c54a318f4e", "indicator--80bf6064-ee3b-4e12-b546-5df350ba7e61", "indicator--728e3a91-fe2a-4c00-b3bf-e3640fd5dd9c", "indicator--bf1fba2f-e746-4145-a14a-18616aa16000", "indicator--89b59a6b-0612-4057-ad9a-3da816af90aa", "indicator--b9cc18b2-d29d-4361-8459-94b98b0c0221", "indicator--2ff489c3-d162-4efa-96d1-fdf453b2f5df", "indicator--06766cd0-c2b1-4484-a1c0-255c7b6f4b92", "indicator--1f7f830e-7add-45d9-bbd9-1d403be71def", "indicator--6a25b07b-3530-40fc-b92e-6ec8c2709236", "indicator--fd2a05c1-340a-49a9-9080-33afe1ac0a0e", "indicator--6a532706-afd7-4912-b23c-eeb9bee9affd", "indicator--38661d39-be2e-4bfe-9c80-f1a6fd6658bf", "indicator--700cc82b-6e5f-4fea-a7eb-922161472aed", "indicator--84530693-2d3d-46c2-a2ee-c6307473cbe4", "indicator--f5cfae83-e9be-49a7-93db-c7a457943355", "indicator--ca304a58-9f32-41e2-81c7-c6529addeb7b", "indicator--170a0e61-71b2-43ac-80b0-a830407c671d", "indicator--b6c50a04-067c-429b-b706-55c5208a66ba", "indicator--110cfd08-2c62-4164-af19-d134ef04876f", "indicator--364e500f-f047-43ce-80ed-cc65fb4a8064", "indicator--d69ca014-18cc-46e5-986a-7188d69aed18", "indicator--33743066-14b0-4652-bfb3-70f7a2da0393", "indicator--c86a3625-2c71-4164-a902-fb75896c51d9", "indicator--0d2ce92d-d30a-4bba-845a-0fc5d839e9b4", "indicator--5edf3d4a-be89-4424-8d69-061333019f91", "indicator--6467fd01-b694-4cef-9c39-3feb91bccc88", "indicator--12817fcf-698b-4f5d-baf4-4f644b9a7b20", "indicator--20c614f5-914e-4821-9c2b-8683b2b10772", "indicator--65eb83a4-cfd1-4b35-8368-02d27a0c3fce", "indicator--40d677c7-d909-4ae7-9055-980925c73e92", "indicator--1925f99c-dc9c-447e-a0d3-8f3c38112291", "indicator--ec9b9d5a-26de-4536-9b42-c3c6d171db62", "indicator--4d85136d-732c-4a52-9880-be1622709474", "indicator--6ca0338d-09b6-41bf-844a-de3101cf2161", "indicator--16848e0b-b393-4203-a12b-2735d09d374d", "indicator--480337a8-1a0b-40b0-967d-5ecb13e50dd9", "indicator--a643da46-a94a-428f-a2c5-08a7715d9076", "indicator--8aa5b479-9df7-43d0-a2c8-6e9862eeebef", "indicator--589a7da4-e503-4920-b5c7-7cada6496707", "indicator--e1a17711-ac1e-4ab6-bffa-2cb58b5f38af", "indicator--46846f46-df46-4428-8ba6-f23c1bf6a0be", "indicator--759d8b82-f3ec-421a-871e-3eb76fb64239", "indicator--5c4d50af-8462-4b38-8bba-bbf4eb5274d0", "indicator--a6b0de8d-8e22-4e0a-ad15-5a978d9f3b02", "indicator--3998eded-d7f3-4bea-b20a-56796a669d68", "indicator--efa0a47d-6f3c-48eb-a63b-b5f3362a2f62", "indicator--597a4ec6-761c-4e04-8fe0-8fdcfb8fbef0", "indicator--6cac0c8b-07f9-40d2-b68a-318499fc2f64", "indicator--5a417f08-c1fd-42e7-82e9-64b1a66b5ec0", "indicator--2d720b51-4c16-4d70-9dea-27307cc5d919", "indicator--2a421818-3256-42d6-9ab3-e36e4a163095", "indicator--19cee452-711d-4707-8aba-743dbcffbc2a", "indicator--c863a81a-07c9-4cf2-9e96-2d0fbb19a230", "indicator--8aa26b09-c3d2-4f83-9643-48b5ea5ee189", "indicator--5c294da8-17dc-4be1-a1cc-39f0f89ada66", "indicator--5a450f9a-da45-40f9-9633-5656206cbd91", "indicator--9059e2e2-4989-422a-8a73-4f6ea26a0be3", "indicator--d1f27987-97eb-4a6f-8f33-c6f9e6ef104a", "indicator--7dc75961-5e89-4556-bdb7-416ffed1b4ac", "indicator--553cbaa8-40c7-42a6-bca0-ceb58c6dcea1", "indicator--baba7904-7e1e-4872-a61b-7d63d0cb624d", "indicator--7d474e4d-d2a5-4ef4-af07-a40cc72d2391", "indicator--34ff996c-af17-4a6a-b369-31528a1ff51a", "indicator--ed43ceb8-07b9-43be-afdc-4e99890654f2", "indicator--a1e28f51-578d-4b72-8d99-6519bf79c0b5", "indicator--d0aa920a-d14e-453d-9a1b-4e5f40a67fd5", "indicator--df5f0108-d211-4597-ac72-01f149d63c29", "indicator--9efd4645-821f-41d0-a4f3-6550124d1bb4", "indicator--f4a33a13-f980-411e-abee-bb83f390cb63", "indicator--451f2e7d-bde0-4f65-8a7b-9a53eb0e625a", "indicator--8fe17649-2712-4bd3-98ed-eba05e876b22", "indicator--e59a752b-617a-4b68-8609-be1fdc4f8836", "indicator--75ec4a00-fc4f-40c5-bb34-ac874bc7681d", "indicator--756ff64f-e741-46c5-9c26-a9dbbd6292e6", "indicator--343aa50b-a1cc-4861-90d7-4fc10e8248ee", "indicator--df848a0b-2672-45b5-9a22-1f03f25bfa3c", "indicator--e4f42076-293d-49cf-81ee-3d7d10bab62c", "indicator--539c8702-8b1e-4a14-8891-c7f8c05adfe9", "indicator--41930d96-906f-41b9-ac55-a74e39ec19cf", "indicator--cb4cb7dc-e810-45b7-8d5b-b704c0418887", "indicator--fed18c23-56d4-459c-8c97-ff4d1b2db262", "indicator--fea12fb3-ca32-41bc-92d1-ab252d118283", "indicator--67a70102-5cfb-4014-9731-9afe3c299f27", "indicator--a03f7fe6-fa33-4399-b07c-be9658d58105", "indicator--838325ba-2458-400d-9198-a34fefb993c1", "indicator--0631db8a-52d6-43f4-b3f3-27412c9f7f53", "indicator--3d50ce86-3086-4c98-8064-76f0a85452e6", "indicator--42b2ce48-b88f-49f3-93d1-e7905ab9a563", "indicator--bd85763f-1ebd-4745-8cc5-50a4335d069c", "indicator--be2024d9-fb96-47c5-bcb3-f6864a120a86", "indicator--6dbf6d39-39f9-4df9-89bd-eeb19505d08a", "indicator--a51ce5d3-3d15-484e-938d-b3a5d7c28120", "indicator--cd3533d2-a089-48f9-8a36-2cb47c874093", "indicator--3891bd47-a31f-4683-8fd1-bdb3f718766e", "indicator--df92b123-868e-470f-8255-a223cfe4f05c", "indicator--ca169b47-68e3-408c-ac32-a24e3dd79e61", "indicator--197c5b7e-db45-4e0e-abe7-9e43dfbbb0bb", "indicator--807505df-c674-4612-9e43-9f071efdc5af", "indicator--e65674a9-2d24-4c73-b41d-fef66f5ad33d", "indicator--5f01bd1e-cdf3-404a-b72d-b260e0800b2d", "indicator--a7f9312f-71c8-46dc-be3a-56be9c4a85f8", "indicator--29236d44-35b1-4c30-9d7b-6de67f1fb038", "indicator--a30de750-a888-45cb-b157-09b80cff121d", "indicator--d6b20edb-c38e-456f-8480-9988980ba846", "indicator--3132bfc6-eb4a-435a-8630-2367331518e6", "indicator--1842160a-8ebd-4b2f-91e1-8bdba9460388", "indicator--3f04d2e5-1bcb-40d9-834c-afffbf8d8d20", "indicator--3bc50cc9-a660-4158-8fb2-56c9fb3f8649", "indicator--616edc5a-49a2-4031-902a-2703602151d0", "indicator--d1c62f83-3535-4ade-b891-c877affea8e2", "indicator--0cf1469a-a37a-4995-ab43-19646f7cb8f1", "indicator--55cc389f-3a0e-491d-886e-529832a8ac32", "indicator--24b4abda-80b5-4782-ab50-d2d91a016561", "indicator--54182180-50aa-4418-86ce-b75f67a75d93", "indicator--9e0d713d-2acc-4aab-bc20-6c3f95c6d005", "indicator--22078ed2-2ed7-414d-a01e-35eb1ee58285", "indicator--1ed37aa0-b354-41b8-ac6e-db1a7c8d76f3", "indicator--4197ee09-7c76-42d7-ba96-ca7e584f6b14", "indicator--3a742593-2650-4e28-afbe-c37cf8344408", "indicator--d09c1bc2-47e4-4542-8798-4d8f5cca4449", "indicator--1423e5d4-0514-4120-8eba-05aa900773e7", "indicator--34f33705-ec39-4101-b743-cdc667b1e10b", "indicator--8633de4d-31ab-49dc-a6e0-9b5bd24f6ee0", "indicator--6d67112a-db67-443e-b83e-671d11efd12d", "indicator--f05e97da-39e8-4611-8742-6962bd43405a", "indicator--a77e462e-e34b-4342-b3ba-eae81f25ce05", "indicator--15a35f61-69cd-435e-a3b2-24156dc4867c", "indicator--55948783-30b2-48b5-9060-3886936b071e", "indicator--716530db-4f7e-45e6-99f7-b2c92af39a0c", "indicator--ef4749ed-494f-4e53-abcf-6e1ec8c541f6", "indicator--db7ba768-b6e5-426f-b390-495202b158fa", "indicator--5a3ab684-2d7c-4b4e-aad9-5b9092dc929d", "indicator--1739d326-1ad5-4561-8687-74c24b5c34ee", "indicator--f14cb3ae-b40e-44ba-be9a-7a1ee47561b7", "indicator--03c39cfe-18bf-4c13-8b5c-b5e0cbecd9b5", "indicator--fe0607d3-b6dd-403d-8f34-e8c5464ff82b", "indicator--f0cf436b-c7d8-49db-9c2b-b3c6b9e58237", "indicator--ae3060a6-57dd-46ea-8571-05f66f681a81", "indicator--a176101f-c23b-40d6-9c07-26b942a8ccdf", "indicator--478b679f-d4a4-4199-9ef9-1a675d1e31fc", "indicator--47d2d854-bb78-454a-8a98-4c05a0db6b29", "indicator--f1825c3a-0b93-4b26-9fb3-d3ed85e7793c", "indicator--5a5b7f95-09cc-4d2c-8e67-4506714d8784", "indicator--9e750816-6c99-4532-804c-67c2f19c5cce", "indicator--65aecaf4-5fde-4596-bd19-fa1c21e514fb", "indicator--779ebc06-5c00-4486-89f5-968ffa7b3988", "indicator--d9fa4916-4e20-4dd5-a471-dd9584405d57", "indicator--38df059e-6b90-49b3-8a01-2a8a419cadd7", "indicator--6a4b2f96-0039-4376-9457-07567da51123", "indicator--8d1c2182-7dce-4492-aae8-e79d3be326c0", "indicator--5c93c6c8-b324-430a-b137-c5a7f3b0b6a9", "indicator--cd1b1e4f-0fb0-4962-9742-1eae823ecbf7", "indicator--2a1a82da-2667-4418-b338-6b8549f99ce7", "indicator--524beae3-43b1-4f78-bb44-f91dbadfe309", "indicator--2c62dbab-ca24-4f90-bd19-7dc2a55dd0e3", "indicator--c323bb6f-bbab-4406-8856-fd9cc49b68f8", "indicator--39ebd4d6-680c-4a47-a1b3-43d6da31f9a5", "indicator--2ec134c1-5eda-4adf-93a5-ea22ce291a1e", "indicator--fafaf4a7-9745-47cb-b5c8-1107f6f0f008", "indicator--7e51efde-ef3f-48e7-81f1-e6a21cf07d1e", "indicator--21847bb6-e413-4356-91c2-05b60f83c309", "indicator--03506292-3ba5-43ee-8da3-ac6a21fa7d19", "indicator--6b5369e5-b2e1-49e1-92d5-3bccd808f4ad", "indicator--e391bb82-35cc-4d77-97c4-85947e27ea36", "indicator--6a4bbdc2-ceec-46d1-a0f8-c808f2fc9c58", "indicator--2b412a3c-d679-4479-afcd-01ef0c049136", "indicator--38639a8d-066e-470a-ab99-7862845e17de", "indicator--756b4b81-1e57-4346-ad42-56cfd51b9a5d", "indicator--c9feab61-e501-4cbf-9f91-53a72d419cf9", "indicator--ae306cc2-ee20-4b7f-8f70-56cc26fab0a7", "indicator--4dc91d93-daa1-4223-b515-48f9c163a0d2", "indicator--8a6331cb-f4b1-4692-ba40-c2ce5b7d65db", "indicator--4a5d751e-3e86-4caa-87ef-e315b444ae82", "indicator--e8b8ba70-fe51-4841-a4e5-10fc8005ab2e", "indicator--b84c0bd4-44f5-4a38-998c-bbd57b8fa686", "indicator--5d0a20db-6bdc-428f-a2fb-7daedc48845c", "indicator--ed42a9d9-b7af-46af-9f5e-4181bff096a4", "indicator--24069fc8-c9c1-4e9c-a0fa-3d530f067616", "indicator--7b8e7951-64b2-4cc1-95ab-e4846bf0f9ff", "indicator--984fbded-7207-4054-be78-f732bb7933f9", "indicator--93b7964c-2990-400a-bd33-6538e682b4e9", "indicator--b4deb520-a8cb-4466-9294-bbf48b2ab82f", "indicator--f9741aeb-c870-4ca1-af86-ece5e2a5a024", "indicator--8ab66ed4-8e85-4ba3-8ad5-af8438fedc3c", "indicator--8f42397e-eb5d-4078-b9b0-684ad0c3dd2e", "indicator--3eaa0eb5-af43-4c1b-a070-3e5cc8f464e9", "indicator--38a1f83a-059d-4c14-b91a-29c5b80bb5a3", "indicator--69c473c8-6418-4cec-8252-6b0640c0a673", "indicator--2616bb32-7b0f-483c-bf44-ad67d767ae12", "indicator--76776b4d-1bec-42c6-9cc9-ef977bc28657", "indicator--56b55a3b-02f2-40db-a02b-a4ec617de978", "indicator--5514ca0f-c6e7-4057-b570-d78fccae8046", "indicator--b4972b30-9c99-4672-ad73-8aaca3620396", "indicator--987a0518-3893-4dd9-bab9-5a83033224b9", "indicator--9c271981-2294-4174-b66e-e176b9c72579", "indicator--107fa7ed-73d4-411d-83f6-7648b3ec30a6", "indicator--1eff7479-6ad9-4acf-bc0e-251fe94ede9a", "indicator--a28a56fa-07de-4519-815f-d4f50e40627f", "indicator--8a611bd5-a932-4f83-b523-e6faf4402679", "indicator--e1f1ddd3-d8c2-46db-b6ed-47a11e99e1e8", "indicator--680e38c2-5620-4408-ac7a-77ee52e24c84", "indicator--c0083a6a-7ba0-4a22-9cda-fcdce0e5e0c9", "indicator--5957b97c-d461-409f-b3ee-aa8aa5673add", "indicator--bc7ebbe4-6dc8-43e6-8e0d-0faeec57cd3a", "indicator--7bb3174b-e4bc-419b-8e64-e83e1eae9f36", "indicator--f0bb7cde-b3d9-448f-ac87-f5ff427af450", "indicator--34e5611d-a0b5-419c-ab1e-3d86121c6b6c", "indicator--cbfb17c5-7d14-4a68-a691-d6d2adfc0485", "indicator--35655dbb-3e8a-4472-a3a7-acb5c7409af7", "indicator--a51e2683-e4d2-45bd-b1ac-e561dd4f8c13", "indicator--38211975-0485-43c1-a157-ba30fdf9ae66", "indicator--ad87fa04-33cb-4cb1-9c3a-5a1ee2f4d5e3", "indicator--f7835fb6-3192-4b91-8b75-b765b7e0fdb3", "indicator--fa28f393-2c43-4c9c-b034-bda02ffe977a", "indicator--59a90fe3-6c1b-4b74-bc74-d037023e0af1", "indicator--6e0e94c6-1ea6-48f8-bb0a-7345298866ed", "indicator--cfab9aee-f077-4558-8db7-0e18fa199fb5", "indicator--50a45e7c-c164-4ebf-a60f-0599afc451ce", "indicator--d8787b92-aaae-4d4e-8a91-63459c08733e", "indicator--686e1d91-3243-4772-91db-a1dc7897cbc3", "indicator--43c4d63b-ca8e-4c0d-b854-9674fecbfe43", "indicator--c2e6b5f4-f800-4425-b432-de1598974cc6", "indicator--3eb192f5-f784-43d5-a386-c3d7ac0e81ab", "indicator--0d723daf-8d1a-4e37-a8b5-f185ebbba364", "indicator--1f0693aa-7ede-4a6d-8f6f-fb4f5bdd01ca", "indicator--01b0a3f4-79dc-4559-9037-daa61188e244", "indicator--80ff3ba2-1641-417b-916c-10271bc1ef37", "indicator--f2efee6c-6c5f-4402-b5fb-04f824490aca", "indicator--93a90cb7-bd2e-4e3d-a17e-06575f04cc35", "indicator--166a68c3-eed5-4fd8-93d6-1653de50d3c4", "indicator--7eea382d-a092-4873-8d79-4a2e0c066718", "indicator--776b7286-7484-4205-b031-e679d1eae382", "indicator--a3feb487-f4f8-47e3-86ba-192705f1d894", "indicator--6156d00e-2a75-481f-ab68-391266f81fc7", "indicator--db4f4f74-a4c8-4a5b-8380-bbb519e65d5e", "indicator--79a77a1b-bb7b-4fc8-851b-1d4d9ec04ec7", "indicator--d989efa7-51da-4465-939a-7af3b7881cd3", "indicator--af726017-f19b-476e-81cc-17fc4204a022", "indicator--77e3d42b-5dfe-4229-ab67-13caac7662a8", "indicator--a8994404-1c5d-4a43-922a-6aeb0e0b467e", "indicator--12fb8038-2877-49ef-ad77-10df75046a69", "indicator--9f7f8ef5-fd39-49a2-a440-af4931a8cd76", "indicator--2d9f4ec2-dba2-4151-b05f-371b6ff2631d", "indicator--76844d53-a90e-4e08-b559-e1a668051223", "indicator--473785df-cae5-49b0-93a3-093a34d09e4a", "indicator--9d1df77a-b684-48c1-9cd8-4e9439e55a92", "indicator--55c71648-bbba-4ca3-b34f-68acc8bde541", "indicator--df2b235c-9f7e-47a5-9b86-6df8155cf258", "indicator--e60665d2-54c1-49cf-830a-5c62e1d7c84b", "indicator--535fecf1-9da4-4ea9-833d-acc5baf111be", "indicator--a6dd4289-f0d5-4155-8034-8366cccf92c9", "indicator--94375ee5-fa37-4eff-bf0b-82374d6e07da", "indicator--4dd8591c-497f-454a-85ad-f29cc9a38f8f", "indicator--9d7bf645-0d8e-4475-87c2-dfe7e0f0da9a", "indicator--f54167ad-6879-44a0-a6c2-2166373c5647", "indicator--ae2ef76e-a0d0-4c92-af0a-2f4e35a34bd4", "indicator--23cc32af-f14f-4b46-98f2-edc05377299b", "indicator--3ef243a6-b8c2-436b-8b5e-517e7117add1", "indicator--836f0b25-461a-448d-92aa-f988da73826e", "indicator--49aea05e-8423-44a8-9939-aca7d39492b3", "indicator--a8bdfec5-9753-4f7f-bc2c-3d7817627bbd", "indicator--c696da87-c49e-42f6-b003-d5a1d15d4326", "indicator--10a0e5e5-7a77-4299-9b0d-08ab4a3c3d45", "indicator--2132dd7c-3c82-434d-a9fe-1deea021f815", "indicator--b118a9e6-b026-419d-a30d-15b193709d1a", "indicator--643ed2d8-302f-4db8-ae46-385cd5f23ace", "indicator--87f2fbff-e7f8-41de-a906-e3d7135c48eb", "indicator--0173bd76-1415-4344-a312-2e542f4a62f7", "indicator--281a96a2-4411-4ab9-83c9-0b88ed779c67", "indicator--60c850f9-ba70-4f2e-a013-f8b32f11714c", "indicator--fcfa1ab6-ee64-46a7-ac32-692343837ac3", "indicator--0bfe1b6b-c2be-4171-b037-2ca829cb1744", "indicator--7e7a9e24-41a5-4759-8a19-9e20ecaac3d3", "indicator--1963c734-b340-4e44-9bd0-867323afd1c7", "indicator--637c9a98-2fdf-4bf8-a88b-f26596e07fd7", "indicator--2e007374-2642-485e-bcfb-9a56e3a07432", "indicator--406b720b-24dc-4dc1-b3df-c62f75b9565e", "indicator--a6cbce69-c53c-428e-9c75-c54ec2a0b8c5", "indicator--2ba3be4f-8f79-4c7f-a062-0a50d44d0551", "indicator--401727d9-7eae-4945-ac7d-9b4d5f3e8541", "indicator--5d25eabd-7b06-4f50-a507-709d1e6eb287", "indicator--e1e642e1-df7a-45c4-84dc-f2c7c4df131c", "indicator--16414fe4-a333-47e3-9a39-eabecceff7c8", "indicator--1ccefef4-ffdb-4697-85c2-ccf0f1886da6", "indicator--e70b9680-b350-480b-b747-7343f0d8c2f1", "indicator--99d7e0fb-32c4-4374-b19a-39a19e0fcfa6", "indicator--cdc6a3f9-0b65-4256-8c41-4d325d855df1", "indicator--7ab4ef68-0664-4d0a-ae05-c33a085ac838", "indicator--2b8bcb50-7e55-4e04-a886-ba298a1dc0f8", "indicator--e8d164c5-380a-4f0f-b596-998a6afd9270", "indicator--2300f8f6-db28-4088-b468-87b0885a6f45", "indicator--e52fdb53-51e1-44dd-9053-9f10d3919f7e", "indicator--463a3133-279b-462d-bfcc-0f42d41e1aeb", "indicator--b7f6946e-99e0-4f6f-bd25-2303bf0de510", "indicator--e54e1916-1164-4745-acf0-3857a08c44d0", "indicator--4d5e3f9b-40aa-464f-89fe-d906b2152693", "indicator--5418bd7d-a34d-4e9b-88c9-a8c2eba80ce4", "indicator--7c9b6476-e44c-402a-a08c-3ba2c9bc5534", "indicator--f98b31cc-10c2-41c2-830e-e94b3d9c8886", "indicator--9e94ac77-8cf5-4948-a238-f552f518eeb6", "indicator--9fa7c61b-bcd9-4dff-b832-2e33f4464005", "indicator--aa924dcb-b314-48a8-a1d5-3994a052f83b", "indicator--2cab2c2c-0107-44ce-92f1-a4c0d442137f", "indicator--6a4677e0-9d98-4f10-97f0-01c60cf3284f", "indicator--94a3de2a-83be-43d6-9fd4-fed4b2131bf7", "indicator--463922ec-86ca-461d-9d6b-1b7c50cbe652", "indicator--f62a7ac7-70b4-4bc7-a0ce-23702ee3a55a", "indicator--9cd0914d-ca2a-46fb-823a-a593982cba0b", "indicator--c6374058-abc8-405b-b5b0-64cad3cb9a7e", "indicator--e3ff9198-f5ee-479e-af6c-404f08939101", "indicator--9defd471-10b4-44aa-9045-9af65c9d8f41", "indicator--4147e47e-460e-4dc1-bb1a-89d1bee50c42", "indicator--da5b64a9-d177-4e0c-9494-757c11a3c5fd", "indicator--51fa327c-a630-452a-ad66-95b7be70d7f6", "indicator--5164c732-9af5-499b-9655-c3b00dc03685", "indicator--d50f2092-b270-4b0b-9530-20741c22e27b", "indicator--927ad480-6c6a-49d4-9304-f30c7bc63a48", "indicator--32a68be0-bb4f-4002-baf8-560bc04c3be1", "indicator--c137bd7f-5a1f-41ed-89df-8dea468c8326", "indicator--9126a14f-4bef-4510-9a6e-386dbe55bcc5", "indicator--58661110-4cb2-4488-8e5c-55aef9990bc9", "indicator--6f318403-4ca0-4320-883b-cf3c96fa3b4d", "indicator--f173fe74-d134-4677-8473-2c0482be1aa5", "indicator--c8939307-320d-4f0f-b4ba-ae81b1d39f94", "indicator--8240e14a-c846-4eee-bf86-09e12663062b", "indicator--906c1052-fa49-42a7-8936-f8cfe3b3ff0c", "indicator--6895ceee-ecf6-4f60-9817-1c0dad3ff272", "indicator--9ebad54f-618b-4b4d-a202-605bf0bb4698", "indicator--42dd5f0f-eff0-4545-9077-f0329132d201", "indicator--f05521a0-1a1d-4a33-9064-885dc460c83d", "indicator--ea4536f1-e3fd-439f-be87-f2b1abdae500", "indicator--09e5fc4d-cd14-430a-89f7-2edfb94eb8ac", "indicator--d53ffa5d-ddd3-4efd-acf9-9d60833912bd", "indicator--f919accb-995a-4d78-aae3-aec679c4c493", "indicator--ca91b1af-a2bc-4c41-bb5d-0b3ffbd4388a", "indicator--1878b07e-3374-491f-97a7-4ef0d4da469d", "indicator--112573cc-7dfd-4f5a-9eba-243e2f984269", "indicator--68ed7a86-3c4c-4df7-8d93-3833d1f67d39", "indicator--540ce801-9dae-48f6-9e81-475ec4cedad7", "indicator--a69d3f3f-5eb2-4d76-8436-f87110c927fa", "indicator--9ec442b3-4992-452c-ac8e-3b645daa7f7d", "indicator--8200ae36-ffac-46b2-8e75-f06ab6139646", "indicator--172e718a-0db5-45f5-810e-605744f8d21a", "indicator--0c938fcd-54dd-4655-9c02-5ac3ddecd2da", "indicator--7689654c-eab3-45c4-9a3c-460f29dbaa43", "indicator--bd4eab85-9af6-42da-8411-25eb164a9dc7", "indicator--74820379-62b5-4f49-8d90-2cf63b9d1165", "indicator--0dd58c0d-832e-4734-832f-24b5a8c3ec82", "indicator--aa24be43-c6ae-4c57-8c45-6147e2d10606", "indicator--0079802b-bddb-41d1-8113-140324d38562", "indicator--050fa492-26fd-4713-b564-7fc3f4da810c", "indicator--ebcc640b-8c87-4b83-b6d6-49b0afe37d89", "indicator--8901c51f-4302-4f52-964f-aa42870e1bd4", "indicator--52062235-6982-41c3-82bf-8fa4d238261f", "indicator--8c365dc5-b737-4fb5-9ad9-81e0f54ad6e2", "indicator--9b4613ba-f22b-40d3-a6cf-2e779fa58f67", "indicator--c5fbfcc2-e6ad-4d21-80f9-a248f71ca189", "indicator--86410a1b-4059-4f3c-b897-0738ddefa9fa", "indicator--2b03f189-556d-41d1-8d8a-c02b8b6729f7", "indicator--e79b0e2e-5cfc-4a8a-b770-b9e9ff18f533", "indicator--c17d64b9-5682-4367-ae12-400f8b2471ce", "indicator--ade68a99-320d-4b09-bdc1-73308fa764c0", "indicator--9c60db3b-4f87-4100-8eea-30325f7f1c80", "indicator--93879b60-71fd-4ea4-b600-20bc7b6061ef", "indicator--350e1b09-aa6e-4b2c-8e42-6c3793f81657", "indicator--bfa67805-8e47-4943-b4b6-ad4a8f92f3a6", "indicator--a4ae9f58-cba5-4d00-a717-88427aff8371", "indicator--35df841f-90f3-4585-a92d-acc8394472db", "indicator--72aadad3-e6e6-40dc-8371-c0d2be1aa082", "indicator--672cb12d-f5ce-4037-9f88-1b8ea8f72db7", "indicator--7ebd1985-9a23-43d3-a88a-1eab75ff94a3", "indicator--49b3580c-6449-410a-bf91-f4086ac9e219", "indicator--d1651c3f-0d2c-4a0d-b4d3-36926473b559", "indicator--5732f9d6-b8ab-4a41-9adc-7c38ce849d16", "indicator--0c0feae1-5dd3-47c8-b1c6-f3b2914fb1cc", "indicator--ba0e67a3-129d-48de-9228-b60f90095cae", "indicator--5516d9da-05cf-49f9-84fc-e699c1d929b7", "indicator--abbce99e-7e17-48ce-8562-fef6d09371c5", "indicator--9327767f-cab9-4190-a54e-6b8e11173b1f", "indicator--175ef6ce-334b-48ca-ab13-079674bab1b6", "indicator--f708d9d4-ab20-4d85-93a3-f20c48ddd2c7", "indicator--54b40dd1-e9b5-4fca-b7b7-474a7cf87746", "indicator--6cb6fe33-5ad5-41a9-b08c-19af52f9c6b3", "indicator--4c3be525-c6a9-4465-945d-b1be9d0e26c4", "indicator--ff354167-ddaa-46fc-bd9a-7fbcc6492074", "indicator--25d82ba2-042b-44e7-b338-d6f763649a4a", "indicator--5190c959-7c00-431c-9b87-13b6b5aa3c5d", "indicator--00ee64b0-0358-4053-b072-5bd9bf25baf3", "indicator--14bebcd3-9ca2-48a0-b4b6-40921aae7108", "indicator--bc948bb8-8b3a-46f9-95fd-3693762d03a4", "indicator--e38e53f6-4af6-49b7-bd59-7c056be38473", "indicator--d814291b-9e0d-43f7-aceb-05a066ad6859", "indicator--5239c146-b79d-4bd6-9f64-ac47d8913c75", "indicator--b8eb05e1-21e3-4b1f-89c5-5d3ad538acb2", "indicator--59ffb069-3bbc-4d88-9996-0de5720a17e8", "indicator--5b777320-d0a3-44c4-89fe-9752e456aaf3", "indicator--96f766ea-2f86-4899-a9b4-3e0110c5ee9a", "indicator--d5108fe6-a5fd-4fe5-94ed-1217593bfa7a", "indicator--137d1af2-c3cb-4d3b-b8bf-0f0a41984d34", "indicator--4b9f2fa5-4984-4832-b2a7-f02fc9e70fdb", "indicator--7f781772-3a2d-4546-8748-5f60fce4ed29", "indicator--546e9e4b-c232-4d1c-a940-34886c9f67e3", "indicator--61b6ad88-77f1-4968-9175-1f321e6951be", "indicator--b1cf4b8f-e79c-45b2-aeff-3e8f991709e5", "indicator--944457ab-5492-4ea8-81f6-88e6312ea65f", "indicator--65cf2448-7459-46c7-a276-e0c59b8c0de0", "indicator--a64c2486-5c03-4d90-9e0f-b2d5dce8a887", "indicator--f8e57c16-14b1-4d62-a6ec-4bd50c2403c8", "indicator--639e7cdd-d5ee-4f4f-92dc-48374bcb1d73", "indicator--8d4159e8-db46-4f3a-8405-71c78de53dc0", "indicator--7baff99f-0c82-46bb-836c-ee53dde6a9c4", "indicator--abdb692a-73ed-4614-ba47-a7fef99f6091", "indicator--394b480a-e6b3-4810-8f4b-e0ec46d0d0e8", "indicator--b0261d53-6749-47dc-92f3-0568e9a5a0ff", "indicator--2c72bce9-7c9c-4e24-8208-bc6d7bd9b6bb", "indicator--9fab996c-bdcb-457a-a8d6-8a0033cc6600", "indicator--289cf685-871e-44d9-ac20-edda3633897a", "indicator--995ef135-cd3f-43f1-9902-6c384fa9fb85", "indicator--965acbee-929f-455e-aba6-2d0521784f2b", "indicator--fa4b96f6-1592-4404-9bca-3e3bcdf93ba4", "indicator--329347ac-b003-40ab-8a2e-0cdcebd95325", "indicator--6473b416-6468-4955-ae92-8bc694d9a355", "indicator--f223ed1c-fdc8-40c4-9931-3c8b7b8608ea", "indicator--1b94b2cc-79a2-4bb1-b59f-6a033d7b4e43", "indicator--212656ff-4bf1-48df-9bd4-7f296d41ab69", "indicator--56967b4c-cda7-454f-9c64-7e0e5e8d1eab", "indicator--add9e0ed-cc0f-465d-a804-fb17463e80ef", "indicator--a4d7431c-cc29-46e7-affb-1667d6f05eb5", "indicator--d5167dd1-33b0-4715-a4aa-32b80e8a6403", "indicator--af2a99e4-6b4d-42ab-891a-442b26347123", "indicator--bd00a194-78f7-412a-9bf1-7800c856b9b1", "indicator--b2dc297d-6818-438c-8ada-d744b3a60436", "indicator--c80c2a60-f7e1-4015-ac39-36390fd11c27", "indicator--88d99b3b-9f9d-4d9b-b965-9a1f20451957", "indicator--ac292469-2fad-49b6-bc53-4484d0716db0", "indicator--d8f2a050-5924-4039-bffc-938a73ecfeef", "indicator--387c6fd8-e55f-4880-98fe-fb59b5c5031b", "indicator--f92a8e04-7196-4aa5-9776-c11c47e7934a", "indicator--dbab1bd6-b80c-4d2b-ba94-1cce28f26692", "indicator--f8a98bf4-6149-40af-aa94-cfc0e9621752", "indicator--7a0db8e0-d2f3-47fa-9f53-804f01e63e6f", "indicator--0bea3eeb-f6e5-4038-bdd6-a9abd6424d80", "indicator--2d3ec85e-2301-4d04-b8f3-57d10ae7c16f", "indicator--bac3d79b-1e1e-4990-9528-f6d4fb3ce6cf", "indicator--bcd7cf01-0f54-46e4-84e7-b94d5a1203e1", "indicator--91448805-2cf3-4c41-b2a1-d911e8580bd4", "indicator--d49b0b80-94cb-453a-b709-6266ed6c59cf", "indicator--e55f3167-bd2b-4805-ac24-db62dcef3535", "indicator--a902c79b-55d0-482f-82e7-b2ec199a8c69", "indicator--1a0ddb9c-baf4-4de9-bbd7-a4b3164fa3e0", "indicator--f3459768-cfd7-4e7c-9da9-6ff32358000f", "indicator--06e1b41e-166f-479a-befd-67af60c3a65c", "indicator--d4efd8be-210a-49da-bb6f-8d023eb428af", "indicator--2e423d2f-4342-44eb-b952-57ee937576c7", "indicator--e89c6b40-530e-4e44-a255-f76078378f48", "indicator--049bbd41-4367-438f-ad1e-d45fb565bafb", "indicator--cb6ab603-bd45-4249-bf98-1d6e039cff3d", "indicator--67565ee0-1a91-4c96-8688-012c59dff085", "indicator--eab27782-fd65-4621-b1c3-1fef799795ac", "indicator--10313e0c-7d31-468f-8f2b-c3197859ca13", "indicator--adbfe115-4d56-4684-804b-79522e450863", "indicator--6b31bd63-7e57-4386-a728-3d5ccc6c589d", "indicator--47d6e59e-f95c-4869-90e1-7a7128dfeb91", "indicator--520cb98f-7c73-4551-a6cc-1db3c6ad4166", "indicator--a45c71ee-2c85-4301-88f9-f2a858cda92e", "indicator--48acb021-0558-4fa6-aeae-0784f86c980d", "indicator--55ee8583-bf4d-4894-a298-3a0a16188135", "indicator--28f68c05-fd73-4bba-bde1-251e1282b793", "indicator--e425e276-3cd3-4237-9c88-df56b7dd40a6", "indicator--8eb9ef06-a46a-47fe-b6c7-4ca07496b0bd", "indicator--032ba101-8a21-420f-982b-7898baccf61a", "indicator--6ce088c2-bbd3-4bae-8de2-4b43eef12416", "indicator--21a90172-a6a7-4bac-9bdd-d6a1d54cccad", "indicator--0c70c29c-e25b-4caa-9bfd-697cf0adc813", "indicator--60cf025c-a986-4379-bd72-48214c20819b", "indicator--9f2e4ef7-e2be-4fee-93f2-9544695cf306", "indicator--4e7e248c-3dbb-4d91-98cc-873763b82536", "indicator--0d2458bc-e085-4735-b148-2ad60f4244b0", "indicator--6d922335-49af-426e-a62a-d1b15f2bfbb8", "indicator--a8844204-62dd-490a-ab11-72f24985a191", "indicator--5701d379-d920-4bb0-9103-156c867a9082", "indicator--8c356df1-50fc-42d8-921e-63c4fa84987b", "indicator--05251cbf-8740-4b36-b45e-4dcfd6c713e1", "indicator--250c44a5-4e09-449d-b031-8fc819b98e99", "indicator--2e04d737-037c-4f98-916b-444e8680f5ed", "indicator--1faa3661-5372-489f-beea-b6ef91023213", "indicator--e0d507b1-fc43-40cd-b568-d3e0b4eadf14", "indicator--cc53b187-0095-41b0-b98e-2a926b44117a", "indicator--470ad83a-a409-4da3-8abd-e584f8395d0b", "indicator--9cad1779-62d4-41ac-aea1-6a90059824f1", "indicator--493a49cd-72bf-442b-918a-ee8d6d167676", "indicator--ae8b7a36-a2d5-43ee-b271-f18d2dd70b7a", "indicator--499ec082-4836-43b9-a53d-c4aac70d0bda", "indicator--52dec87f-073a-44ff-892e-f1563633e7ad", "indicator--52844bb4-c1db-4026-8fed-768f5966a8be", "indicator--73d3e8a1-6907-4539-a7ee-34881cafe756", "indicator--91422cea-bf05-4311-9baa-d90e1b3b6385", "indicator--71930ec8-17a3-4ec4-8863-ad256d81d978", "indicator--aa0a9539-26d0-49fe-bbc8-d46403ff1f37", "indicator--ab5c4a81-3e4c-435d-961d-11a467971020", "indicator--6283756a-acfa-487c-b7d3-6eddabedf19d", "indicator--c2cf9df6-1b58-46f1-8097-c7f0c1c66163", "indicator--f32ac144-1c92-4bed-aa7f-6f3a84c7ea40", "indicator--44d41c44-aa46-4c3a-97ff-dae73185272a", "indicator--e828013f-ab42-44ae-8974-dbbf00ec366b", "indicator--60bd74dc-8576-4aa0-a217-d5cb5ff7bf9f", "indicator--78beff75-7096-40d1-8ab2-60469f1e7c53", "indicator--f89b4f74-eebe-4fc7-8225-270f72c0d5c3", "indicator--614a1f2f-173b-441c-8186-398ba9c5ca27", "indicator--85618edb-540f-4cda-a69b-9185fc963c4f", "indicator--0eff7535-7fd1-412a-916d-213f25a7f727", "indicator--6ce8a4c4-16dd-40b6-bd25-b4901a8bd2a3", "indicator--edfd5d9b-7254-4ddf-9b2e-59c2993be66d", "indicator--96557098-cb06-4a25-90ba-0d921322efd2", "indicator--ca51db4f-0158-420c-9cbe-560e5040da78", "indicator--7ad6267b-7c1c-4eff-acff-fa63013ee103", "indicator--d041fe1c-e58e-4539-8cf1-f8f4c82328f3", "indicator--ce1cc65f-586d-4b2c-82c4-cb3de5db3fd4", "indicator--67907515-f50d-49cf-b8ca-b9ac75741932", "indicator--d5a67de5-90bf-4fa2-9a0a-d00ce18a4a31", "indicator--753a1834-798d-4785-b1d8-c5f161c8c42e", "indicator--e0355dcf-a55a-481a-b7b5-18cb2e7927ed", "indicator--088bec09-bd9e-461b-904d-dbd5126acf30", "indicator--55ab7c2e-2da7-43ef-8b9e-ab9afbdbaf63", "indicator--bb10fd76-0068-4846-a29f-f9168901d6a8", "indicator--85c6b0aa-b88f-455e-95be-5ddd12b3948a", "indicator--d523c1c3-03ad-436c-ab1f-5504b290d2c9", "indicator--6a870699-bf5f-49c6-93c1-29dc20b1ff14", "indicator--aa7a67b0-a812-45d7-947a-b1e8a5b4effa", "indicator--cc6c90c7-703f-4174-b41f-5ba9f292f459", "indicator--ef2b401f-d5d1-4290-b190-9b88da9ad08a", "indicator--93621f50-ac4c-4778-87bb-840462540114", "indicator--6bd5e4ea-8bbd-4b4d-b868-be4a0f2a543e", "indicator--ea7efc90-9ae8-4335-b739-f305211f87c7", "indicator--80e4c999-c179-4d46-9d85-963c320d2d30", "indicator--248e7a83-ff27-47c4-bcad-a3c7ad59e6f3", "indicator--8b1a1803-0bca-40c8-b413-307e69ff15f3", "indicator--c7ff8ef0-cc33-4740-99e8-345b7c46d370", "indicator--ce86cf4b-b0d2-430b-bdff-c1b67315604b", "indicator--fa9b531b-daea-4761-80dd-818a2ed676d6", "indicator--6cc5afd5-db4d-4f32-b8bc-dd8e5f18da19", "indicator--dbb8ffca-259c-41fb-b631-d10812331b40", "indicator--e486a30d-cfa9-4f28-9353-11b90d881f1c", "indicator--cdd5c8a3-0235-4e0d-a49a-6a930dd58210", "indicator--7a216b1a-d519-4848-b057-71302b3cd5f3", "indicator--6bf13b03-8720-4445-acc6-eae458a584aa", "indicator--1a83b50e-3b87-458c-bccf-84db264b12f7", "indicator--e6925157-f5d3-42da-86d9-c9e724e33676", "indicator--5cc2f47a-3fd4-42ff-abb8-ee3664b909fb", "indicator--a490931a-535f-4409-91ff-c8c6f91697a2", "indicator--7cd3f345-9af6-4044-bcda-b32251d006c4", "indicator--b0822ceb-d32a-4ebe-9670-08a7d223a9ba", "indicator--55bf5001-ceb2-41c7-abae-7668b6fd12fd", "indicator--7a24564b-0082-437b-8f89-cf935d5cfc29", "indicator--70ba62dc-eeef-4efa-b92d-2804549cb865", "indicator--d1237cb8-dcad-4b39-8f04-f2f61cddc26d", "indicator--5911b860-2d99-4063-80cb-f9ae19ff5e45", "indicator--5808c9e3-20d2-447e-aad4-a8dfa446142c", "indicator--e604247d-2489-4674-8c01-8889f8b1f40d", "indicator--406a71a9-6f68-41fd-8fb4-ab0d5aeefb56", "indicator--fb3a62c9-25ba-479d-a641-e8e92e7dea06", "indicator--0ff2c21e-5e59-4186-b7ef-f2241868d194", "indicator--3c4ac81a-182a-4e31-9e75-d2e2d9110e7e", "indicator--36bdca77-1ae0-40d7-8c40-78308416ecda", "indicator--8aeeebfd-0680-4985-8222-1e2ab7ebdadf", "indicator--0d85b392-0847-4cbb-9541-adc6c5f45f78", "indicator--46de64d0-7e95-4138-9a21-332c07419a3c", "indicator--f1616963-8f31-4296-8de2-25cd7d987501", "indicator--fa1ef19f-a161-4295-ab39-86ee0249ab5f", "indicator--652680b7-ccd6-46fb-9a5a-fd0ac88b7aed", "indicator--76557651-3cae-41a5-90b1-3b7eae1d4545", "indicator--afe578c7-bbf2-4867-8e93-1460458087ee", "indicator--f6537f7c-53c8-42aa-8fe7-e48832784c46", "indicator--2641a392-661d-43eb-bf9b-335645b94c41", "indicator--467dbe2c-a74f-4e85-89aa-740956ec61f4", "indicator--aca0bf1b-1ffd-4e27-8d83-fd0214fd07a3", "indicator--3d5b5281-9dcf-4982-8c72-a95954a04735", "indicator--f9657909-a8db-4c5f-95fe-c6cd20032465", "indicator--6ca1b54a-beee-4661-9e97-ba8412076d1b", "indicator--1a0f49c0-9319-4402-891e-e077a3de7da0", "indicator--78f0de85-4aca-4c94-afdd-6f143215e27a", "indicator--2f3f045e-fc08-4090-943f-09447499ca3c", "indicator--1dd5c904-919e-4742-ae91-5cc905d11d4c", "indicator--b2b4a9cc-be62-4b0d-a3cc-0be0d33dcd3b", "indicator--af78a690-047e-4612-9c2e-3cc2feaabaeb", "indicator--94836c50-de3c-416e-bd60-311ab42a019d", "indicator--14e0c3f1-1607-4d76-b129-60c709e37f6b", "indicator--7a735ec8-631e-4ff2-a875-2d9ea41fc9b1", "indicator--11840748-b255-4bb1-8a2e-611b7ab73130", "indicator--010dd9ec-8557-46f8-879a-d108eb1c4f16", "indicator--0aa4a4fc-f8e8-4bd1-b358-51250f7cde91", "indicator--635932ce-388a-47cf-8e9d-d095247297f1", "indicator--291b6e1a-0a2d-4fb9-91c8-9225c97b5549", "indicator--9a7645d2-0098-425f-92f8-262628bc4d6e", "indicator--965451c0-52a8-45a2-ae33-29ce694bdacd", "indicator--87f5112c-ee83-4151-9090-13743da1ab3f", "indicator--ed2197b8-60ca-4f24-adb1-864381d627fc", "indicator--7deb05c7-e41f-400e-ae21-930a4cd522bb", "indicator--759a16ac-f84c-4db5-995c-ec937149df93", "indicator--561fe128-875d-43ed-ba80-d8078d628718", "indicator--afc072ad-04a8-41ea-86c5-03db2e7d8b5e", "indicator--e53a40ff-5962-44ba-91b3-234312880e8b", "indicator--4361ebfd-2f38-43ac-8bbe-83b0ee3ef2f9", "indicator--eadea2f6-dabb-451e-8e0c-58c4c8f9cc7a", "indicator--e8b08249-eb9b-422f-9d7d-6e164ed17049", "indicator--f3c655fa-6a18-416e-9f7f-d05efcffdbdf", "indicator--c6e135d4-0fa4-4717-9119-388c0fb202e7", "indicator--c9a3a93d-5760-4f15-9df5-ffdaa03bd4ac", "indicator--c2344306-d33a-4451-8c5c-a8ec2cb0368c", "indicator--b8da786f-2ebf-4ac1-a8f0-a93f33c86ce0", "indicator--6d9c0054-03c8-48ef-be3d-b32dbe583f78", "indicator--d4dbbfdb-723c-46de-93cb-567d04a603b4", "indicator--49654007-bbea-4d82-b4bb-b3a5a3e67f4f", "indicator--a476cf66-93b8-4fe1-b3cc-78415a90f5e5", "indicator--da3633e4-1018-45ce-98e0-c370586c27c6", "indicator--321c483d-f2aa-4f9d-bfba-ddf4834b1910", "indicator--6688ff40-48e7-4a9a-9685-7f99a1585382", "indicator--244d990c-7305-44da-90bc-d008436e2466", "indicator--4294da88-a50c-45c9-a0f3-8621caffdf47", "indicator--57d64be5-6531-488c-b873-f2289de8b1f5", "indicator--057bcfaa-3360-441b-80c5-8c936a3ebe98", "indicator--0a3d0b75-d7c5-4d16-b058-9c33c1f945fd", "indicator--0cdd6073-ee3f-4c96-a883-e08091401996", "indicator--bd54e3da-4a70-4b57-aac8-2e943a713758", "indicator--e56ad6f2-ebbf-41e3-91b9-25e21adc1cae", "indicator--ce669a29-45ec-4355-9943-8524910eac1e", "indicator--276290ee-7b5e-4bfc-82a5-ecf369ceba0d", "indicator--413370bb-b758-45f6-8cc0-33bd7f119f68", "indicator--16866043-18d3-420b-91c2-eb753402d387", "indicator--a034f3fe-7310-4191-adbd-c6b43220d413", "indicator--081e939f-6d87-4d83-8973-cb7d811a0c16", "indicator--ce28c6e8-4437-4593-918e-ea85b51b43bd", "indicator--a5f538a6-4a40-4770-b5d0-d1cea406c331", "indicator--afd7e7c8-dec1-4bec-a33e-16f2d4cbcd7d", "indicator--dd5659e1-7f17-48ef-b11c-2daf5a7b7155", "indicator--d628535d-161e-4b96-88b2-2246f40b19b5", "indicator--586264ea-e24b-49db-b4a5-543dea6502ca", "indicator--7e79bfb9-cf43-4eef-b439-a6f628a7ef7c", "indicator--d30590c1-c74e-4f4e-9c81-21eb6d105bb5", "indicator--d5adea57-7a0b-4da7-a24a-92c808d9215a", "indicator--b6289a95-1117-4714-9e1a-5abe41ab892e", "indicator--c8f1b076-6b83-4c0a-b7b5-ad77d7c21381", "indicator--e519fb87-0f4f-4922-a31d-ec7f4d8fcefa", "indicator--9f91830f-8170-455c-a694-9c0227484884", "indicator--f644ebf5-5474-4be6-a4ff-21ceeb935559", "indicator--0c80af8d-5fc1-4ddf-9bf5-d6809b1b91ee", "indicator--bbb24c05-e738-497f-b129-c04ad15ba7f2", "indicator--5e05d33e-eb4e-4fd8-9706-3fba5ad8663d", "relationship--7699ebb7-3caa-47d5-85cc-b85597eeca02", "relationship--ce7f7338-b23f-4891-b3ec-4db6b0c21e57", "indicator--f3be2492-8e04-4d84-9d1a-1d05028eccdd", "indicator--3e41b70d-6a41-495c-97cf-0bfab2ea5827", "indicator--93353ca1-d734-4e53-b7d0-e6db7cf8194c", "indicator--6707c4ab-54bf-4017-a256-087f16817f42", "indicator--b14defba-85ca-47c0-b5ac-7f719fe55be4", "indicator--371e5102-1dc6-4eed-9008-037d5e654626", "indicator--a8366d17-393d-4945-8533-0f31c519e82d", "indicator--4790f7df-f2ac-40e2-8818-2cab0a673efd", "indicator--d53c19bc-26f3-4f67-a455-060475e9c63a", "indicator--0730bf82-be75-4b2c-8bd8-d6d742633421", "indicator--9ead8e6f-f3d9-4afa-9528-df087e115f80", "indicator--d5bd4c16-2b23-41d9-930d-b18fa2043d76", "indicator--95e41356-8cc2-4fe2-9f22-aa943d008bd7", "indicator--cc83848b-cc54-4aac-bb76-e0972e110779", "indicator--f1381e11-c6a5-4e94-a50c-e2a734e280a5", "indicator--f8fa1ed6-89ac-4670-b6cf-b4bf04b9095f", "indicator--91dbc875-9aa9-4e34-8520-f1c1bca3b737", "indicator--f606f18b-dadc-4e94-83e4-f2295a2a2053", "indicator--bd1437e7-b54c-4d6a-ac76-fbcb51548c22", "indicator--3e1785ce-5425-48e0-bbcd-b9a91354453e", "indicator--86e67736-5f44-4364-8c13-428210c44da1", "indicator--62de2804-a465-45fa-8233-cc2a10eeae9c", "indicator--97df8f11-fdc9-45a3-97da-6edb6513b647", "indicator--bf6c0a68-a68d-4bdb-89fc-500680341adf", "indicator--0ad8d8c6-d39e-4ffd-b978-19fac1925218", "indicator--66488b76-a70b-47a5-9546-b092e88848e2", "indicator--9086e98c-6266-47ea-b18e-4778a975f4fb", "indicator--d6ad77ca-f83f-4e0f-957d-c33b131613cf", "indicator--095a3e5c-572a-40cb-9a7b-66cb71893220", "indicator--1a9f53f6-d949-4525-a10b-bec3dbb020f8", "indicator--f61dbcda-0ff6-4f3a-beba-1b62826b66d1", "indicator--ac5e2ff6-2909-43a9-8146-a6b9af3dfd00", "indicator--d067e99c-a7ab-4144-90a5-f9e6f4e881a3", "indicator--282e0252-77e1-44d3-ab0b-9fe0a3fc9e55", "indicator--bcd8d9d9-9a84-4ffc-aa85-cb036a402bfd", "indicator--3979f051-6089-4089-a10a-b3d742a3830d", "indicator--a90b4228-9fa2-422f-a219-a9a2ee0f04f8", "indicator--994ab290-4df8-4ac0-9baf-9bb5884be817", "indicator--863e981b-69cb-4d36-8815-0e10a2e16b24", "indicator--c5f2a170-7f13-42d3-b85e-2f653cfb9bda", "indicator--39f093d8-70cb-482a-82fd-38448ebd3ca2", "indicator--f9c094d5-58c5-4d1b-b998-6df622880552", "indicator--bd4c9a3b-6346-438a-b03d-b77fff84df7a", "indicator--caa86f5a-d85c-416f-acfe-9a729f5dd79e", "indicator--54363877-8c57-472c-8e99-dff8ee1b0a02", "indicator--0a9b3815-8863-4ba7-9229-8672067a19c4", "indicator--c8f104e5-3171-4201-8eb6-191c7cc9afe8", "indicator--29e46f99-b3ef-4af3-b289-a32dd8eb89b1", "indicator--9f29566d-25a4-45f0-853f-b398bd791417", "indicator--d0bc45e7-6957-4be6-98cc-e2047d10ed4f", "indicator--435d90c0-9d12-4a3a-b27b-e81b2dc5a700", "indicator--49fc46d4-0dc2-473d-8c77-3094a3c15b1b", "indicator--ffc01ac1-1396-4592-b9eb-09fd1e57c498", "indicator--a96bd2fe-9d9f-4680-9db2-fc736ec3d305", "indicator--aa225caa-cda3-4246-8c27-d07eed58456b", "indicator--4830cd61-2cce-4261-9124-5a2daa91824f", "indicator--0d71c35a-e45f-4651-954f-559e3a55d289", "indicator--8d0d1756-86ad-44a4-926e-680077c7e36f", "indicator--d080d624-f71e-4241-9664-91df4c651b4f", "indicator--d825cdf5-1a8f-4930-8433-d39f8baa3069", "indicator--6a09cb84-1c77-4f51-aa5c-8a1f80be4f75", "indicator--8aa46263-1f97-44c2-a7fb-875f0c89a6d0", "indicator--12bf153e-fae5-4b11-b009-98c7796c4cd1", "indicator--dcfa7fe4-d4b7-4048-980a-7419775b9f02", "indicator--63d04940-e71e-4361-8ce6-d560e00ffcd3", "indicator--8a766d3c-06bb-486f-b18d-98deb08828cc", "indicator--9988d7d1-538b-4b99-b416-96804a16428e", "indicator--e658a2a7-c7d4-4201-b1ab-8d106ec80139", "indicator--37948d56-afa5-4a50-ad89-a345c8e8e262", "indicator--421191f9-9fb0-48aa-b3b1-82af1f788aef", "indicator--3ce09c1d-2939-458a-87e7-a9eeff636e99", "indicator--4e5decb9-443b-4348-87de-3a0cd51ac227", "indicator--aad42a6e-6c57-4a24-8c9d-58b011f59154", "indicator--1f5cb73a-3032-4c76-96b1-aa3ecb97d6b4", "indicator--d9b3769c-46c9-4473-9ede-84a91336e4bc", "indicator--0e43286d-db6d-4e30-9e90-b9e7d85b6fc1", "indicator--88657051-5a43-49c2-9fb2-35c7e31cb1cd", "indicator--082fcb0d-4fd0-42cd-b0c1-c95fffe51da7", "indicator--38498206-7125-4992-a1c2-89828e3d2fe7", "indicator--6cd5b459-ade2-4a2f-b388-715e58a5a693", "indicator--eef1706d-05a2-4517-8d43-3cd626048b9b", "indicator--ae2890c7-e76e-40c0-b58c-4b7c290c828c", "indicator--f7aaa21d-a4d1-4e28-9ce3-55685f72f4cc", "indicator--4338d00f-d830-487e-a043-806015e7fe2a", "relationship--cd190069-4e51-4224-a3fa-7685be46d8a9", "relationship--6bea54d6-4785-4be4-b6b8-ec06cfa0068e", "relationship--deaf1a7e-f94a-4c59-8abf-7b5ed46124f2", "indicator--537eccd9-0237-4553-b07e-68b0171c7442", "indicator--a5b6d116-3adf-4b49-85cf-ea7dc3497e7f", "indicator--9ba0fb83-2b41-4d7b-9846-9b56fde48326", "indicator--75f82856-d1ea-4511-aeb6-0a585d202079", "indicator--d9998f19-d870-4ed9-8192-b120a6354fcc", "relationship--b120d43c-d287-4606-b0bd-0374efbc2c85", "relationship--0b20b7a2-ea7b-4e54-a74a-03f77c127990", "relationship--938c4330-ce46-4282-8463-a86f3209ecce", "indicator--f13efcbf-53ba-47d0-a2e9-27b723018fdb", "relationship--e959f4eb-5294-4919-9b8c-842aa4b5fb31", "relationship--c42ba4f9-417e-4b95-9556-5f5f242fe272", "relationship--583597a7-7041-4332-b3ec-35d42e1a89fb", "indicator--6a0100c9-76dd-4809-8ef5-ed74b09641db", "indicator--e247729d-f7b0-40f5-a65a-d82d1e1070b8", "relationship--a8b006b8-76ea-454e-a99f-b2a270290771", "relationship--2d2c8e7e-099c-41c8-bdf7-e23b702991a4", "indicator--8cf3d945-9f3d-4704-92e5-8a0611d3804e", "indicator--29d80ac9-892c-43d6-b434-92ec697db7bb", "indicator--a833e90b-b364-4549-beec-b555ee854058", "indicator--a8ad8dba-908b-4794-b5ab-f7980ace0bde", "indicator--3ebfa742-9781-4b77-8437-e8390f62810d", "indicator--4ba50046-b3b7-4b2a-9ce5-589f7e1d5648", "indicator--69920431-5c23-427e-83b6-c2a8f56ee398", "indicator--2b1afb8e-1d6a-4f1e-b9dc-cdb84e6ef464", "indicator--00bcc74d-bb55-45fb-8646-ad8b2535cc3a", "indicator--332ca248-6613-46fa-be0c-1ac37b372176", "indicator--00040895-f4f8-4172-9a4f-7a847f63abca", "indicator--002557c4-0eb0-4e1c-8745-3d8203168447", "indicator--11b87d9c-09cb-42a9-aadf-6c4531c54911", "indicator--612dac02-703f-4562-9464-0d1766ad9d0d", "indicator--fcf9556c-a5a4-406d-806c-3fb82a02637c", "indicator--6cfcce5d-b4ab-4daf-b0e4-319af195cf5c", "indicator--aaf15fac-9992-4035-a784-a132d65d9097", "indicator--77464c5a-da3e-4f43-ab4b-caa6d21334cf", "indicator--6fe067c2-4785-476a-a893-19a6a90b756e", "indicator--93e10d44-968d-4a7d-a804-39770cf6e0ab", "indicator--b9977d9a-7c65-4241-8586-45c1231b1b26", "indicator--405846d8-7a82-4a7b-85b6-3d251b77482c", "indicator--62e5bca8-1e71-4019-8b7b-66aaaf966a82", "indicator--e09e30e5-0cc8-4cde-a09e-7f5d4f169b4e", "indicator--1f3b76b3-7aad-48bb-871c-419c18d5af59", "indicator--c6f92192-2cad-4829-9bca-f53117a10d2a", "indicator--3d377d18-77d9-4fb1-8a14-5b9807ea131e", "indicator--6046d94a-550a-4b22-8b12-6f93931cd4dc", "indicator--6ae7df93-0320-4c46-970e-f87ad8b8b9c1", "indicator--f24cef18-771b-41d3-9733-c56ada47b5d4", "indicator--72c5f70a-c273-4a95-9b68-8cc0a8b63506", "indicator--f79b01d3-c63c-4590-8a58-b50d4c2ef1cb", "indicator--24e56ad9-56bd-4a16-b960-4c31df356290", "indicator--cc69d8a0-82ae-478d-8eb3-74dc33ac4424", "indicator--e4d365a7-c351-487f-b21d-72c84d0e696c", "indicator--f0ea7204-0362-4f24-87da-abba5302a2c4", "indicator--369efe74-f07e-4d0e-a150-7a0efbbda385", "indicator--8786de1d-dc0d-4ea3-8e9d-df9b3122be9c", "indicator--f5c19147-8aad-47e1-8256-b2f1d613f080", "indicator--f3cacd87-ace3-4537-8576-58194ffff3f9", "indicator--51c0672d-acf6-408a-8ce1-4dd2008d6b91", "indicator--4aef8e33-3860-4401-b810-b1d6b7713508", "indicator--b96eccd6-e38b-4a09-b1da-2b05be7b64f1", "indicator--2e88a9a8-c6e7-4909-919f-85fc889dc0aa", "indicator--807e6e7f-c87c-43a2-8db3-61831920cfe6", "indicator--4f736ef6-4ee9-4e03-9429-ba80dbe19a43", "indicator--02f9ac57-ec75-4fb7-b9b9-9b2db2c60505", "indicator--6b4e01e5-8a1d-4383-b1b4-a028c9765a5b", "indicator--f34b8f2f-15f6-4221-8376-37ea6f9393e4", "indicator--11730753-e01b-416e-a925-7d4472a23e88", "indicator--5d8d8c5d-c596-4b8a-85bc-2fedc8751f0d", "indicator--46d489de-fbcd-41af-8181-1cbfca44f2f2", "indicator--1a75555c-ed1b-41a9-a004-a2734fa7b46d", "indicator--46ff63f1-af07-4097-a7f9-ba5e96216141", "indicator--6bc04d18-add0-4947-bce5-0979e396f847", "indicator--9c6c6d32-a006-4897-ae2b-9e2f0e0dc92f", "indicator--34c23202-6c2a-4a77-a13d-2b7ac07864b5", "indicator--d3e9bf06-95d2-4d95-b159-386e2e62e6e9", "indicator--18293378-8781-46c5-b895-1845b1cdf57f", "indicator--e415a36e-ab97-414a-b1d2-3ec760957732", "indicator--a38d26c6-05dd-47fe-87f6-61d3bb2960d1", "indicator--ad1cbe36-98c4-4ca4-95f9-3dfe80666b75", "indicator--33e36065-e4e3-47bd-af9e-56fa7bbcd2c0", "indicator--6bc5db33-eff9-44a6-9b4d-b0ce486447ad", "indicator--187a1002-70e9-42be-8523-355896283301", "indicator--cbcf06b1-c564-4b16-b979-fdd86bb093d1", "indicator--c808208c-ebd9-4a5a-8c20-d6ec272dd0a7", "indicator--6506d21b-cfda-4eae-b500-267b49871797", "indicator--5021036c-5123-4939-bd7a-0ba5edb6b1bb", "indicator--db250957-a4b9-48d5-b2ab-f6c5cc8dc4d4", "indicator--a09c3244-7537-4086-ad8c-ff7e9eb36f78", "indicator--f6360724-1942-4f2a-81aa-2a9d35eaf8cf", "indicator--d1cc102e-47d9-4b77-b1dd-ec8835c22153", "indicator--4db0f13c-7e15-4546-983a-7b4f26105c33", "indicator--00c99610-0d33-4502-80fc-7ab91f39858d", "indicator--6cb2f3f6-f88b-4654-9fbf-222d3cdef25f", "indicator--7c89894e-38b5-4158-8ac3-f98b6de748c4", "indicator--81cba770-74f9-438e-99f0-1e52a689a5bc", "indicator--65c9585d-2c3e-4a74-8c94-6ba6c243646d", "indicator--982e76f2-d577-461d-92a5-89544b327450", "indicator--910b419a-d6c4-410c-b491-b42e235efe47", "indicator--998a5b49-41e4-4539-9876-9675d36c9881", "indicator--590420cd-5551-43f2-8cdd-e923f443edbf", "indicator--c10e1c76-817b-4834-b5e7-70c61de6d348", "indicator--a817f309-098a-415e-993f-2698ec5bf545", "indicator--e02739d5-e1df-4ccd-9247-03ab799a4d35", "indicator--8dea268a-3957-4bf9-be0e-e0183367bda7", "indicator--c1e7dfcf-4624-49a2-98ba-0ed2d3bca939", "indicator--1ce25440-67fd-44b6-8f43-aaeae1a4d384", "indicator--58472408-6599-4605-92a8-8692ba5adb0c", "indicator--3d360edc-c851-40ed-9d7f-94f45cf5465f", "indicator--0f86d95a-161b-4fc5-b1fa-12a17b7e76ed", "indicator--9e28fe5c-61b7-40b4-9e7e-69e24709f9e6", "indicator--536d6424-dcc9-4e7d-88a2-ecff7560f2bf", "indicator--2920378c-55b0-4f56-a68f-aaff83f85297", "indicator--8bc6af7b-e969-422e-a600-d35d4b622998", "indicator--0a9d7047-6c89-441b-a06c-26d8d7af23ba", "indicator--89560598-9f02-4dab-b8d4-b13e0f614386", "indicator--695709ea-ccb5-4f45-88b4-f855214dd863", "indicator--4b558046-566f-4a0e-afc9-5a34ec3ee5bc", "indicator--3cb8d311-5224-48a3-a6e6-311b32e53125", "indicator--d1ec75d1-a18a-4191-b200-39ebf3e40e15", "indicator--20f1b719-09bc-4e7f-80cc-ce7794858bab", "indicator--865bb3a0-8017-48b6-8f9d-378ae1decdd1", "indicator--120c926e-9da8-4187-bb21-2192e7426332", "indicator--149da6f2-517b-45ad-9715-291553fb8271", "indicator--7e237a14-10de-4f50-bf6b-58fcf845b323", "indicator--ce96fb3d-2aa1-4863-bc99-be2a02f62964", "indicator--7653a4ed-43e3-4ef1-ba1e-64a8cfe18d72", "indicator--79b73682-557e-4d74-b3e7-14cacd42c4a7", "indicator--b96d40b1-ab71-44b8-9459-c435de62fe53", "indicator--7b09e696-ab06-4a16-97a9-1f3acabbdffc", "indicator--33925b62-bc58-4851-9825-2b555b225bd8", "indicator--ba15f870-fcec-447f-8ac1-9c4e6ed4c8b8", "indicator--95a278c7-0a48-402d-af78-88b78ae49ac8", "indicator--bc67e06a-e71c-4e6c-9f31-d3d8f0601f86", "indicator--e1463186-1c03-4808-a545-cdc30b0564a0", "indicator--e100d3be-7d85-46a8-a030-4f62ec8ce0f7", "indicator--a9d30c98-6cbd-4653-ac42-c9cf4777a2e2", "indicator--aa5ea8dc-a1a2-4ddb-8d10-9c93615cc035", "indicator--a08f91e1-6681-4db2-9048-92da10a3621c", "indicator--2627cfa8-9008-47a9-baa8-732e1ccde009", "indicator--27149f7f-f311-49d0-9663-78666470ade5", "indicator--6cb5c39b-b725-4d95-8356-845891427b78", "indicator--e9be3173-7835-46a1-9537-a31082dbc0e1", "indicator--59969ba0-961b-4f85-ba55-34089b5e1bd8", "indicator--2800220d-e74c-4735-93da-d8c998c9ca9c", "indicator--f436121b-a98a-46b2-b411-b1530b74ed8b", "indicator--5ba6c0a7-3a98-4f97-87ac-6ac9c9760fa6", "indicator--a1443eec-1655-40de-97b6-9f8feae5a14b", "indicator--a0ca67f3-511a-4713-bd2c-07ef44d364ab", "indicator--ae21dc2f-4666-457f-9bfd-690baf318bdb", "indicator--55e8c4fe-fd50-4138-866a-501336df3a2c", "indicator--394f322d-8612-40aa-b4a4-c57bcadf10e7", "indicator--874781c4-2832-4ab1-a0c1-f88f2d58a3ce", "indicator--002b63e0-c118-4bc0-a36c-6c08aeb743a1", "indicator--77e2975b-cd8c-40b8-a8ed-767759f21751", "indicator--5a2e29ce-1dea-400f-a739-ab6e10ee2a6a", "indicator--c0c6c761-0c66-4154-b692-a585f03aa3a8", "indicator--353f6205-77c2-4af9-bec8-bdf4f5f48483", "indicator--16df6e65-52ec-4907-b5c3-6d349f3b07cf", "indicator--8766878c-65f6-49f3-9baf-8b85d4caff1c", "indicator--c28aff12-06f0-40d7-8159-98fca8d18f24", "indicator--c6aff433-f535-4280-8772-0921c2347231", "indicator--ce53d2cb-4682-45c1-9729-f202e83ee40c", "indicator--820d578e-9a25-44bb-a6fc-67a747d6e53c", "indicator--93cfea96-c383-4cb9-81db-3fde025de5a8", "indicator--b7e5fb25-4a1a-415e-b3cc-b8d436304400", "indicator--09c4f72d-1ff3-43eb-8a77-d1dd54e5f464", "indicator--8f586e01-4758-4655-850e-1c10cd64d0ce", "indicator--49d63f46-7f2b-4f42-9c8e-54163ddd112e", "indicator--1591fa1d-e890-4890-ae0f-9e4fc3b8db2e", "indicator--2f989b83-0bca-459d-bd81-9d457764b4a4", "indicator--10ad6eac-7e0c-4b7f-a749-fbec048a1fe5", "indicator--99ce8319-f900-4ff5-be43-168377ce0668", "indicator--6d9f040d-ecf7-471f-bb8c-2b4992f2c672", "indicator--e2dbe157-5ce8-4eb9-b5a6-3af23d0d6795", "indicator--ed120fcf-a2f6-471c-b5cc-a0a2565fa479", "indicator--9f64d632-6c34-4de9-bb91-574163e6c25e", "indicator--850b723c-9aef-4308-bee0-5415cf57c64b", "indicator--0ea8283c-10fd-4527-bfa0-1d58b048dd56", "indicator--18e45850-cb9c-4aec-af94-c236da1cb660", "indicator--617f37cc-6ef7-44d9-9016-2d9ef69a4cec", "indicator--6d2752f3-2b3b-40b5-9d89-f79e0a66928c", "indicator--b8ed4d12-613f-416f-b3e5-9df6864b09f8", "indicator--b636924c-ef70-4be6-9475-ffe557ebecc5", "indicator--5477b36e-1154-459f-8427-277dc8dc917d", "indicator--9843495c-08e0-46f5-94f7-55be85b552fe", "indicator--597e1886-7aea-41d8-821f-7ae645eb13ef", "indicator--68f0cfa3-8d67-47e4-89f3-ffb156d4a071", "indicator--9d4f5f43-8db9-45d5-b54f-d42f060b3deb", "indicator--6f928e48-22b7-4463-b26f-57d70ec4fa9d", "indicator--fbe75aa5-1cf3-4610-8607-cc3de3f2f308", "indicator--b1dbdc45-448a-4f38-b596-1c48396db14d", "indicator--6e81c04f-45ad-451a-b3f2-bb0b5c767231", "indicator--e2fd4c7c-0002-4a9e-a68c-4960d91fd607", "indicator--532687e0-5088-4580-b165-2fae39b47b58", "indicator--91ff141e-e699-4cce-8d8c-49a3f701c72e", "indicator--039d8c3c-fed0-4695-95fa-96e4d6cefeaf", "indicator--b3996741-7e37-4478-9612-352b52942b6b", "indicator--034fa212-6282-4157-b402-8a49bc8eb2dd", "indicator--c94378b4-d402-4663-a3ae-2fd72f9bc867", "indicator--0893e571-c09f-4619-ba9e-c44dd59f7307", "indicator--589e610b-b126-4661-a01b-34cc13246104", "indicator--10b6a359-5648-4c6d-a030-b556051c86d6", "indicator--e3598210-2182-4539-9c4f-79b918dc5261", "indicator--c340a10f-41d9-4633-aedc-f0f09118a4e4", "indicator--82451e22-d33b-45ea-8ff5-e3bbf79591fb", "indicator--4d1f82bc-960b-4314-b2eb-7a03d8827520", "indicator--0e557dbc-0e6e-4dfc-bde4-ea448c840b9e", "indicator--82af65a5-36e1-498b-8908-35a28a8113ff", "indicator--8e12a22f-3439-4c80-a5a3-eee989b163d8", "indicator--6b41a4da-3a29-41e6-b484-7ca949b4965b", "indicator--3f7c2d05-0917-4a48-b83d-d38a3eb39e17", "indicator--e0a5512a-f904-4f53-8bf2-b7b75b57a5ed", "indicator--6898b6ff-f31c-402a-9bfe-d9f80d32fd63", "indicator--822da146-91e7-4ad3-b8d7-7072977d29a4", "indicator--6e9cb399-6ee0-4834-b943-a55d072eaa11", "indicator--2ba00df5-5c17-4c87-9d8c-86a1694337e2", "indicator--0fabe905-58bc-4d10-a396-a232b7296ab8", "indicator--9d79d0b8-c50f-4043-af28-b50839a296f0", "indicator--0922fc07-1f12-4735-861c-31a77cc3334d", "indicator--f4b4a04a-48a1-451b-a5be-931f4352482f", "indicator--bd0bf18f-d812-46cc-b564-f09e5a9e5c8c", "indicator--f9d5c77b-272a-4279-951b-f0f2bda23f2b", "indicator--b79011fd-5b4c-4c2f-805a-aa84d1c4f4da", "indicator--2efeabfd-8508-43af-a01f-659c9613eb02", "indicator--c01a22cd-4561-4ad5-afa4-596ad935ec37", "indicator--f1d80a7f-bb66-4d07-b176-3e36be0b0152", "indicator--2877ad16-3740-4749-a30f-4099700cd248", "indicator--db4fd13e-0aaa-48f8-95a2-fee6f6c141bf", "indicator--23e3314f-b76b-4319-87d0-de5a17542807", "indicator--8ad13a88-fdcf-480b-a2ff-806a11896099", "indicator--73ef7636-e719-4015-9c52-8f6b464ad4e9", "indicator--26e4646e-0041-4b40-823d-dc8fcd91f93c", "indicator--6fd42b9c-805c-489a-a6f1-555fa2102981", "indicator--d14b1e0e-bcc0-4ad9-a51a-ca149b33edef", "indicator--0e639dc1-4779-4500-b846-3386f38281bc", "indicator--90013099-f657-4976-89db-aea9b3d9f137", "indicator--d01f9960-6eff-48a0-a882-112ba89f724c", "indicator--c278b623-d75f-4d3e-a12b-cb1fdeb63a04", "indicator--52887164-dce4-423b-8342-030d7e288d49", "indicator--28d7e0f9-021e-46f7-ac53-9ab6cff4b98c", "indicator--ed431f92-1ecd-461d-9cc1-720c664f8602", "indicator--de100078-2487-4714-852d-019d88233556", "indicator--ba39a5cb-d537-4c4c-ba35-2d4c70162e70", "indicator--0be09a7f-138e-4202-9dd9-4c956d6ea1bd", "indicator--dd05f54d-4935-44bf-b7f4-3700ebb4aab7", "indicator--673e01fa-88e1-4939-82be-13f9714e0954", "indicator--2746f596-749d-42de-b8f0-cacd3f21461e", "indicator--5833da57-e81c-474c-afd5-c492b922c8ac", "indicator--24ae476f-ca68-4cf4-b36f-c547dde0ec99", "indicator--26babb1c-7244-46e4-9d29-3ff91f0213f8", "indicator--79114f79-92a1-489f-9327-b8860d1b61df", "indicator--7dec0e4c-3594-4925-b93e-d765b072032c", "indicator--88942019-dd8e-4ec6-8b4c-113da8252fef", "indicator--46d5c626-bffb-49bd-94a8-618a210c69f3", "indicator--a4cbdf9f-1b02-401d-bdd6-19a46a8fe80e", "indicator--4f7ce120-8378-4f23-8482-d0fb7a98e099", "indicator--fcbea219-b4f6-49c5-bfd0-a32488bb6f86", "indicator--d805ca8f-4c2f-4504-b389-58ad1bc29a4c", "indicator--33990abb-633b-420f-a43a-f703d37e765c", "indicator--c57be2f1-c184-4cea-810f-fbd10c921480", "indicator--e99936e8-c320-4680-a2ce-df0c6ebaff2f", "indicator--f7a3d179-c5aa-4c21-8470-43bc435ea4be", "indicator--997b6357-eeb7-4492-982b-50f85df325ea", "indicator--68c0b113-7259-4d67-8a71-4aedc4df423f", "indicator--88f52f75-1698-4204-957c-3f686afe5eb2", "indicator--6f7fb7d3-8ea9-4b48-8716-f781cf4f4726", "indicator--8e313ce9-6af2-4cb6-8223-0dc39367e8b9", "indicator--1c6114d0-d0da-4d43-8649-03455a58b3ec", "indicator--6cd1881b-b525-482c-b6c0-0806f4ee9d00", "indicator--d9c92517-e29a-45b5-a95a-216e052ccb88", "indicator--a023b71e-99c0-4572-8aa6-72251c1ed9cb", "indicator--b94bee7f-1ba4-42bf-9af8-ba762c42eb46", "indicator--fcd80234-9693-4d04-a873-ca2bf1e5aa3f", "indicator--89284ea2-aeb5-4c54-8955-623a89ed06dc", "relationship--0f617037-db44-4155-9b00-28e5c2b65ea6", "relationship--dec5b6df-77b6-4012-be73-a5996e417eda", "indicator--17b1791f-0075-45c6-8cfa-6318ebea7ab7", "indicator--888a848f-f06c-4427-bf33-49206180bc22", "indicator--782adeae-d5ee-478a-94f7-308e97b0d0b0", "indicator--f884115d-895b-4044-8876-34b1d0179cd4", "indicator--08b0019d-86be-423c-b9ed-2ad14d9f4ef7", "indicator--f9617699-923a-4545-b843-dc5578dffcee", "indicator--949c87da-35d4-446c-b321-a77a4fdb9604", "indicator--23b087e3-b26e-4cd3-8ce5-bd9449be350a", "indicator--d78b7f3c-ae05-440e-becd-d7d2394a2e3b", "indicator--5bc96439-4dfd-498b-b8ff-9e9699b568bd", "indicator--e7d35f61-7186-4c0e-81d9-a75ea3cf2aef", "indicator--40c15fa0-316a-443f-bcce-431faa76fadc", "indicator--96defb85-80f9-420f-a280-054420ba66fe", "indicator--5ce7efdd-1f37-4c4e-92a7-b0812cfe88fe", "indicator--933c6ae3-de52-477b-b750-9ae048faa401", "indicator--92d7e73f-b514-4c73-a840-1d831879ca9d", "indicator--572aacd7-e2dd-4291-a9f8-b8de16d34f10", "indicator--e1be8657-2995-4fae-bb2b-47a45f3f9229", "indicator--47f4d135-5b82-4613-9fb2-7fd20b4838f1", "indicator--6e3ca0da-6835-4862-af40-820c7ba6c01e", "indicator--9b9f98f9-3b02-41fe-b432-898cbf74d300", "indicator--ecad2272-ad84-40d1-9a8d-c40e4f6a6e98", "indicator--cb84e97d-c210-4db2-aad8-4f90471f96c3", "indicator--05b08c1c-01a5-4507-8a2e-7cf4ab2cf887", "indicator--9780cc33-9e9f-4038-8996-bcf33d390177", "indicator--7e0c6b16-0807-4ecf-87f6-3ec4d26986a8", "indicator--b787761e-6ab7-44cc-afa0-84c70bc67bed", "indicator--3c9d9e00-bb8a-40dd-bd36-7d80466736ff", "indicator--82c2f8ae-593e-42a6-a243-6669f20472cf", "indicator--28b3732a-0e09-4a95-a6db-b1f3017c1de3", "indicator--525d0060-1113-43cd-950a-3634d1786b89", "indicator--45c199b3-5a48-416e-a60b-0282d96741fc", "indicator--a3ad2c63-e80e-4e55-8dc9-30b2ee9f33e0", "indicator--2265306b-3dd2-4302-b1e0-5febf6280c5c", "indicator--e8e0be66-02a6-4a02-80d3-0825dae2db01", "indicator--4fa3cafc-3343-4008-b5c9-aaa0d98d7566", "indicator--27e3d9d1-8f20-4d8d-b82a-5a3943ef957d", "indicator--c147a269-98c5-486d-a2fa-be3c0c483afe", "indicator--9b8d09d9-626c-43aa-818f-74a68648e1f6", "indicator--12e37dc4-5d07-47b9-823c-055e4c69fd19", "indicator--694ed037-c6f4-43cd-8a25-99b966052194", "indicator--fdec0ccf-247d-4f36-aa6c-5a7154ac0b19", "indicator--ce711168-3381-4397-99b7-afea79f58eef", "indicator--f43f9f39-a50f-4115-88ad-1558cd0e51a6", "indicator--5c875eb1-2e5c-4a7b-afcf-d47d4040c8cd", "indicator--d5e9acf6-3918-4fe5-ab68-36b272adf7a9", "indicator--88d867a2-8cfc-4db7-a63b-75f8bd1a2931", "indicator--0c081a5a-9629-489f-ad47-1207f6ec3312", "indicator--82d3d707-b7b9-4b0b-b405-2a044861fbdc", "indicator--5be3fd89-82cd-44a9-9d4e-9669861d70ca", "indicator--def9a0df-b67a-4f1e-9be7-ec7da4d18b3c", "indicator--f1970cde-d808-4b37-9766-3dda61aa4ccc", "indicator--267659e8-43db-45ab-85b4-9d5cdaa26b4b", "indicator--2c21e40b-891b-4f5d-9f7b-b77392a16650", "indicator--2992edff-09a4-490c-b0e2-f8e7ae2ea6c5", "indicator--713eb733-aeca-427f-b650-d21e436d46ba", "indicator--c3aef3c7-d840-4983-8c2d-43a9935ca1b3", "indicator--369cf12a-fbb8-4c1c-a7d6-29e683a658af", "indicator--e91e873e-b413-4501-974e-28f15c2e053b", "indicator--62c3c9a1-2ba4-4f50-a45f-4a7f930936ff", "indicator--0d070797-73fa-4954-b988-c0b094e8560f", "indicator--c063f67c-90cd-4f41-8886-1ecf7e82400d", "indicator--fb8f1080-f78e-4b8c-a9eb-066b93e45785", "indicator--7da0fa82-80f3-4e88-b668-b366d7648d7c", "indicator--14b7e685-af9f-4424-bcda-06669bcf4ac7", "indicator--cecac57a-1104-407a-8462-3981236aca36", "indicator--8b0c372e-4075-44a2-b202-d7561acf12a6", "indicator--841f7168-7c92-4d3f-930b-caab3aeb7313", "indicator--f86b1160-2610-4ccb-833b-8980e995cc1f", "indicator--1b5670b6-993a-42a8-91f7-87bd2e035750", "indicator--15cef708-86f6-4082-80eb-9b852eae0ecf", "indicator--709887d6-0e18-45c7-ba22-3f88da2fc54c", "indicator--a2a1ad80-62d4-495e-818a-26620efdfa68", "indicator--57d6bcef-b6fd-458f-95c0-8e142a225910", "indicator--c31be1fb-a7f7-4f2f-9e96-5665deeb5168", "indicator--da0cfc1b-1bd6-4548-a104-d708aa82e9aa", "indicator--4776fced-6a60-445e-a058-726fc7c5e8b7", "indicator--2ab028bc-757e-4c31-8b1d-3de6dec43ac2", "indicator--b7968fdd-8d54-416b-a9ea-91e77d5370d4", "indicator--f3fcb328-16c6-4165-98a9-a056849556a3", "indicator--7eb57a8a-6138-4a9f-9790-8b92b3a2263d", "indicator--8cff4dd3-10f0-48c6-a0af-fd052f4360eb", "indicator--7bd28ce4-3e9a-49ef-96d9-d77623d42bec", "indicator--de27e633-3d59-4777-9bd6-036f6ff78d48", "indicator--bcb72b72-9e88-475f-a00b-5b754bb75c5a", "indicator--25bd999a-2158-4bf8-9809-9f68d7e311ed", "indicator--dde56752-2b81-47a1-bbd0-580287e8a751", "indicator--18ccb6c9-4578-4808-9e7b-307c946b7be5", "indicator--de751351-e14a-47ae-96c8-4c1e1c25b68a", "indicator--32a87a20-da1f-4de2-ae86-62a1b5ff6c21", "indicator--dacb7d33-23be-4975-851a-9f913b4f680f", "indicator--8edbb086-e06d-4789-96df-5fc26a8605b1", "indicator--4a1bee99-7f31-4546-b969-88c4d6deab74", "indicator--bd324761-33f0-4252-80ee-baf6ca34226c", "indicator--5071414f-5f0e-4903-8979-0661ec68126b", "indicator--3959a47f-2282-4082-be99-ca11e4cc52ec", "indicator--167f6925-f7b5-4450-ad43-ef0ff4ba2620", "indicator--c4ab8cda-0553-4a46-8344-9a097362e103", "indicator--4b7fe710-46f0-4178-9ccd-0183cdb6fe95", "indicator--33d95532-0172-4eec-9260-432d5b57b270", "indicator--79b69888-9ce1-4fa6-a712-7ace3f3029aa", "indicator--e8f59d0b-19a8-42a2-99a5-95268d958588", "indicator--dc4cc780-9273-4a68-b360-fedc4a9a67d1", "indicator--ef243b0b-4f05-41fa-b24b-84bb87ddeda8", "indicator--f54d5025-4b0f-4b41-9fb7-4fd9a8639d9f", "indicator--3544a981-443b-42f1-a12d-ffbb31ccc200", "indicator--e0cd1a71-3fe2-46bc-be39-42abfc1534bc", "indicator--54df5ca4-26bc-4134-8612-78556787f156", "indicator--f5360e8c-9f54-414b-b56b-41ac20260c23", "indicator--3e5495c2-ea42-4904-80f8-ce6b6c3cd44b", "indicator--8ff37a6f-9c67-42c2-a4c1-4767a65601ea", "indicator--80878c8a-ea4a-4fe9-9775-b114e68ef950", "indicator--d5e7eefd-7914-4aa1-846b-a84de6272295", "indicator--58fc45f1-7147-4bb5-8bb4-b3d1697c61f1", "indicator--38ffa367-e8d5-4eb8-ae86-baa8f0a0d5f0", "indicator--e09a07d8-db6d-4298-bff8-b4e3a3cfa1c4", "indicator--935e81c5-d984-448a-a6a9-0d4624c3cdbb", "indicator--2aac8e97-8cd1-463d-8681-10e444c2341f", "indicator--d3223a0c-748e-4443-b154-0e044e272b47", "indicator--31fe8d01-b946-45a4-8d1d-ba79dc3e9662", "indicator--eceff8e3-637e-4054-89ca-a216b9e8c29e", "indicator--d26e957f-c423-413d-9ded-15f3cd498a9e", "indicator--777c2603-75ef-49d4-b8ba-44f8a49efd27", "indicator--e86f3561-64df-496c-9eb8-c7befd2fd6f1", "indicator--3c0ac81a-b42e-4863-af32-b3e4cf96a0c7", "indicator--b0aaa2e6-d1ce-4ed8-9f4e-73412624cbee", "indicator--02aec4cb-594d-4b06-ada9-1e72c45f2ae1", "indicator--23b1efb1-e237-4a9a-bdbc-9c9f18fc48ac", "indicator--bc601ce2-2dba-4292-9ad8-3aa0ddee3d09", "indicator--ba88e1bc-ca17-4da0-8402-214104a7f1b8", "indicator--8af32ca9-c93f-4230-9496-c7f23eeb78b2", "indicator--42e74309-dfa0-45b3-a939-746ba135640d", "indicator--58e9c086-db76-4b0b-9e3d-c9cd5c34564c", "indicator--6dfb897d-c3c7-4e1e-9290-0a06882d9361", "indicator--f3c36228-7de1-460e-b278-b37a2a6a34d6", "indicator--a2edd4ca-dab3-433f-ad2a-bc0328b7d981", "indicator--df908cf6-08d1-4db8-aa0e-72743ebc16c3", "indicator--adb8d3db-89ba-4f00-89dd-dbf7ff5dfb14", "indicator--3c0254f0-4404-4a96-b974-55d64cfdca5f", "indicator--6577d7c7-b1b4-48c4-901d-e6674878ca19", "indicator--95e6c048-732f-4b9b-940d-2aa965e19239", "indicator--1c67d299-eac2-49dd-b7a9-344c810eba9e", "indicator--c044c3c2-b36b-44ef-90fd-01c0a89e6069", "indicator--5df47761-1f9b-4fa1-b451-8215b22909d6", "indicator--aa0ce127-e369-4661-a60b-c132b69c7d34", "indicator--e726a00e-5e2d-4061-be5e-2a7f713416fe", "indicator--59096d97-a2a1-4b94-ba58-389d4c226c01", "indicator--37d2d702-cbe8-42bf-904c-07e61dabc89f", "indicator--13caa4ba-0433-4905-ad55-0230786d3f8d", "indicator--1eea3474-b731-412a-a9bb-338ab7ade0f8", "indicator--29ad2707-0d7d-4540-ac58-b1cd168353ef", "indicator--be27eb4f-e8cc-489f-9d1a-eb3cf1b7ac9c", "indicator--d07a1f05-1c28-4fdc-bfd0-c2d46f1462f8", "indicator--6d24c930-caa7-4860-81e6-53bf345c935a", "indicator--110b5825-733b-4f22-b1a1-31cca2b30e80", "indicator--60951aa9-8f55-4154-b11a-3299584bdba5", "indicator--aa885716-52d9-4517-8efc-62571dc57616", "indicator--b12b5ebe-b038-4a11-a7cb-257441a046bb", "indicator--05ca2264-8b6b-418d-b7d5-ab8195d47031", "indicator--43d4dda3-8cb9-47cb-9fa2-afbc42a2b2f7", "relationship--575f428d-c30f-4b42-8d44-78974b39a7ec", "relationship--94da65a1-b76d-4e7a-b41e-ddefb94840a9", "relationship--3ee559e8-ce76-410f-87ba-fce1b4ad0e95", "relationship--73ead513-7679-4bdb-8c44-eb8a7ba1c130", "relationship--8821641f-9492-4bc0-bcb2-f0e6aa949280", "relationship--1bd1566b-6dcd-413c-9824-ae903cc76ccd", "relationship--1c26ddff-682f-451a-ae6c-2224d4cec01f", "relationship--864799b9-689c-40dd-abd3-7bab90adfa18", "relationship--61864cbe-f41a-4e90-aea2-377c8455c27f", "indicator--a649144d-95bb-48db-955a-900a785b5344", "indicator--e7b20512-441c-4004-af14-8bee1cbd3eeb", "indicator--0b74ad53-214d-44f3-9d04-998d17a89632", "indicator--aabd9725-ff95-4957-b9f0-7e7940095a08", "indicator--75170e80-c662-4c03-9772-372ddf24343b", "indicator--ff887fc3-a4f7-4a4a-b810-319328e5880e", "indicator--ce11558e-4a8e-49d3-8303-2cd817fbba89", "indicator--b301d6e2-41eb-4f6b-bdaa-b3448af85fdc", "indicator--2569eeca-f13d-4a16-9363-d69458a38b60", "indicator--2567c255-ea06-4c81-8e5c-858544d32cb8", "indicator--97bcdba4-05c5-42ea-b13a-d5ae480c648c", "indicator--369787f1-5da1-4f3a-920c-e81467df6ad2", "indicator--24df459a-ad2a-4620-b584-9fa90b708670", "indicator--082ef115-86da-4784-b978-fd99c501d424", "indicator--c883a543-6c88-4099-a4a3-900c35d12351", "indicator--7c78fca3-0c32-41f6-827d-34433794a134", "indicator--f8eba4d0-d990-46da-97a8-058d68e3e1aa", "indicator--2c52a569-d7a5-4da7-a116-2b87ecb400c2", "indicator--37b3d7b1-83e9-46e3-8e31-384f16daa391", "indicator--bb2c0ccf-00cc-4097-847c-4e0c5833c1fb", "indicator--b93235f5-124d-478d-8fc3-1e9eebbe3920", "indicator--01b68374-b231-4c6c-af4d-eab356523d01", "indicator--228b6ab6-eb1b-40d1-8a58-7a1bb4807dd2", "indicator--aacaae66-9743-49bc-a96c-2dffb9e09aa9", "indicator--fc8527da-e766-44e5-8537-059090fe12cf", "indicator--a661c8d6-481e-46ff-a133-94c092dd9176", "indicator--b47b34b4-3450-437e-849f-1a3993a9d800", "indicator--6af62ef7-1a05-4183-b6ad-08b74c302b46", "indicator--c7995975-9a2d-4c36-a89c-0d2760544356", "indicator--244f9dda-33e3-4d75-bcfa-a72f8d0246bf", "indicator--0b04453e-a881-4e72-97f2-26b0de910b4e", "indicator--9e40d6b5-8947-4a05-93ac-81c95c283fc1", "indicator--e8578b1f-55dd-4610-81a0-b9c802d2bb8b", "indicator--42b6f123-54bc-4993-95bb-b2cab007e91b", "indicator--91601fd4-e75e-46b6-8f73-a5ff79e4bd22", "indicator--551fb18f-bed6-4bb1-ac01-1dcee135960e", "indicator--9c99b863-ec45-47c6-9821-b9499324b0e5", "indicator--d2f2f043-2e57-4d68-aceb-713edc57cfcb", "indicator--8b5ca5cf-ffab-43ec-8810-8820730f467e", "indicator--7a04217f-79ab-4484-91d0-e463c45f2dc9", "indicator--b05e5a2d-48e0-45e0-bbef-39b396943013", "indicator--a81d2dea-7101-4276-998f-3107adda8e9d", "indicator--274ec2eb-9d4d-4d91-9758-1b8f78e38233", "indicator--5e66f12e-4103-4bb8-9a9c-33b513c1d384", "indicator--5dba9bde-04db-48a3-81a5-2744fc8742c8", "indicator--63962e0e-e75c-4675-b851-0ca79d4ca845", "indicator--0e74881d-00c9-43f2-babb-b457b2abba94", "indicator--5f5216ae-116d-41f5-b168-49319965f3f7", "indicator--482b1bb1-4c46-4a29-958f-51fab105bb86", "indicator--b5f6a15e-931d-4058-9b13-524fbc824dab", "indicator--37eeb8d2-0d9f-4da3-9c4c-8802b9bf8292", "indicator--243d0e7b-26a4-4717-acc9-28b12a647b10", "indicator--61106c77-1d15-4bf7-924b-fe100858a17a", "indicator--fb70cc75-5fa5-48bc-bd1d-b385129be09f", "indicator--9cd8d844-d639-4a71-9c10-026503df3846", "indicator--f92e647a-1c3b-4437-b3cb-05e31fb8a384", "indicator--969dc2c5-80ef-4628-ac9c-f9db9d29e4ee", "indicator--351ea9a0-b092-45e8-9b2e-8a4f80469da5", "indicator--823377aa-981c-4978-82c5-333623d842fb", "indicator--f3e5bda9-6253-4863-962f-7ac9041895e3", "indicator--fc227bbb-540e-4318-8c24-36e4f4ffd88d", "indicator--7b867af6-d35e-46c0-94fb-69806311c50a", "indicator--e242404c-4e4e-4221-a424-33756a31ccff", "indicator--aea79f69-3240-4027-b492-04faa4a0beeb", "indicator--120020bd-e084-481e-9ad6-8f71006df526", "indicator--e93dc7ce-eb06-4806-91cc-2d6799f1b1e2", "indicator--9a90d6f8-952c-43dc-84b9-57df48455edc", "indicator--a1599241-ed95-425a-b642-eeb8e17a39d0", "indicator--b4dd8b97-779d-4301-af6b-1d7f741f4bf6", "indicator--f0e61ea6-88da-4ab0-986f-d47263c342d2", "indicator--d8f58580-b853-4bd9-aaa0-b4bc5acbdccd", "indicator--12824e8c-9875-48c2-b134-fa5b5be0b871", "indicator--992ddd53-4563-4ffb-baf7-4e7e6ce2d7b5", "indicator--6c957e27-e1b4-4137-af5a-4b9199b60263", "indicator--6cc61e3e-668c-49ca-9f5a-ee0c646d0eaf", "indicator--95637c91-58bd-4778-a68d-2da563aa9866", "indicator--e3fd6082-9f55-453b-acf5-5aa7dbe22fa0", "indicator--20c82490-fb56-4b28-b5a9-1422a9a2b932", "indicator--83c343c4-42ca-4628-9772-e88d6d0859b4", "indicator--e90da527-56cb-4af5-adeb-fca21d6e004d", "indicator--772114ac-565b-4312-ab1e-1fedbef198c8", "indicator--ec17eea7-c99d-49c2-bba5-3fa9093ec9b0", "indicator--ad627ebf-4a99-4fc1-ba9c-fb1dc74d35a4", "indicator--db7aedff-e830-498c-9690-904bdcf04d37", "indicator--3cc2a7cd-893f-4ead-a5e0-3b121aea4225", "indicator--04d64c8f-887a-4d07-8f66-e63354e739c5", "indicator--2ff38bca-61aa-4ba5-a237-be09276a190f", "indicator--6e3ac604-bc6b-4d47-b7c8-8abbdba3d79f", "indicator--b24eb9dc-096f-4034-a853-3d4fbcd721cc", "indicator--301c4a1c-a989-4759-a710-181b6cc03dd7", "indicator--9da54354-f197-4dda-8adc-7932b7db4084", "indicator--8f9ad060-0768-4804-850a-c585ddc8ac4b", "indicator--f63e8d9d-c70f-43dc-9400-e0e77ba1de97", "indicator--af9e59e5-6b81-498d-86cf-53226af2bb35", "indicator--29b98bfe-52dc-43b9-b2f6-be68aa7a146d", "indicator--7ac7ea45-ee0d-4c1c-9c86-626ab714de25", "indicator--fab35ba3-1204-4522-976f-e342994f88c7", "indicator--431cf727-3bef-4052-83c5-9428c1ff6742", "indicator--9df28afb-f71f-4464-8a7c-4f4599579ef0", "indicator--d16977f5-7bee-4a29-9b76-fe17bb1050be", "indicator--172d5cd4-2be0-44a1-b0b9-1b70d2007cb7", "indicator--5e12ee4e-ce42-4797-9947-00cdb2d8bc9e", "indicator--a486264a-dcca-4f3e-806c-bae021a45fa2", "indicator--145c7ad4-55b1-4fa2-8128-b330351e454d", "indicator--d842926c-efd1-4b19-ac07-8bf1a9f34954", "indicator--02457bf5-d769-4566-ab40-10f7946104e5", "indicator--a25bfce6-0776-4820-a5ab-c34600ee8ba4", "indicator--08a6d55e-afd9-4e99-96ab-9d6d6436e282", "indicator--74eccba3-0ea6-4f53-8ade-88a9f8bbb307", "indicator--ccaddbc3-7dc5-47ca-afdd-275fb8e2893e", "indicator--d523f844-d943-4ef4-81ea-e98f4030e964", "indicator--10e450d2-f944-4cc1-b14e-bc014a79158e", "indicator--ba1a78a7-0884-4be6-88e0-acbb8ca2d8fc", "indicator--70990a52-e122-42eb-8efb-2fda1e346a97", "indicator--41cba612-d6af-4489-a58d-c3a894af46f1", "indicator--855cdaab-0c66-4c97-8ded-457089930b61", "indicator--e5ab9630-a5a7-4f73-9ad6-780b66e3f977", "indicator--186ad56a-ae5d-42a3-bf65-148797f98273", "indicator--67676e9b-93a9-4b63-b27d-b9e372cf8e13", "indicator--fd263b8a-b591-4baa-9556-b89a65b039d7", "indicator--bb91bb1d-f98e-48db-aabe-5bb68e01cebe", "indicator--73da5d49-acdf-4113-89ce-c893191a4cd3", "indicator--73152994-d233-4e2f-b8aa-b0953ff5cdef", "indicator--07e2ba83-4773-43ec-a737-509b2b45f215", "indicator--7d70aec0-7ad5-4e62-b43f-e25afd723d6e", "indicator--92667211-4a3b-4ae3-bc29-8e22d626446d", "indicator--2c21995f-fa63-4a9d-ab09-04e305ccae0d", "indicator--3ad00122-1a57-4737-934a-7338595b5d7f", "indicator--ec69d9a9-cfc1-4fc3-90ea-7c6d3013c86e", "indicator--0afd4bbd-5c7f-42e8-8be9-74fde76f8d20", "indicator--a333a166-9c6f-4a76-ae30-903b667f73da", "indicator--d6b20995-0202-47f9-b2ba-a7b273ed0108", "indicator--ff4bbd02-ff81-4bfc-b250-d9795c4710dc", "indicator--3b7f194f-a438-476f-a190-30d1971551c6", "indicator--f3f11d4e-a8fa-43a3-86f0-e5391e857854", "indicator--50db7e22-409f-4ad0-99d0-8d59c2a20880", "indicator--21c95978-0588-4802-8375-15155848a4bb", "indicator--0ddc51eb-e420-4bef-b184-a860369c7127", "indicator--4684b325-4c56-4811-9e00-65cf40a908d4", "indicator--9b91b9f6-5ea1-49c3-b645-bad50660e572", "indicator--c4f66e74-25a8-4593-8c62-85f27aa2dd6f", "indicator--08448b70-0ec4-424a-822d-cee52ebe0bfa", "indicator--49179b67-2a13-4968-b604-66de0802d2d9", "indicator--93b4aca9-5d9c-4594-97f1-b090bc85d602", "indicator--735b2b52-ea13-4466-a32f-efc84c1d81ed", "indicator--063d819d-6634-462a-a4e9-9d4444a0ec7e", "indicator--403193da-25b3-4b23-b4a4-d8291787b7fc", "indicator--17206214-902f-4fdf-98b9-823e0c83ce11", "indicator--bd9d4d63-5033-4a6e-81c9-6764dd7e774f", "indicator--44074089-d908-4746-9621-7a9d1e560abe", "indicator--20684201-638e-4b27-adb7-f32c3d6d2240", "indicator--65edd586-8706-44d2-b5de-924f09d29a33", "indicator--d6a3cbdd-d569-4be7-a41e-425c985ac400", "indicator--55b39a0a-597c-441e-89ff-80a7252b9b33", "indicator--d94fcfc5-4317-427a-874f-ab716a21244d", "indicator--54dd758d-329b-4ce6-94b3-33bdf3dd43b3", "indicator--270c0a72-84e0-4022-bc58-cecc9a62edfa", "indicator--f5e694e7-1f67-4809-a08b-982ccc441a95", "indicator--3f41deaa-e76d-4a1a-9364-e642429ca680", "indicator--e702ff97-3f72-453c-bc59-7772309bcd4f", "indicator--d88fe2cc-28b9-4089-a02c-5fcc5117dd22", "indicator--7271f1ac-081d-4f51-aaf0-0aae1a896aa3", "indicator--81a50e01-d9a7-4d94-989c-4cdb9b160ef5", "indicator--2591d1c3-c55e-4407-b8f2-f1668353530e", "indicator--96b731b2-3379-42ee-b0de-3b3e430bf986", "indicator--02e90f67-97bf-473a-a2ea-82b46e614a4a", "indicator--519c3f06-6028-421e-abce-6f510c1bbf72", "indicator--68a84b01-5ad7-4f91-a1af-c822daed464e", "indicator--719a8e33-b5d6-4855-aabd-c942e5576b2d", "indicator--361c89d6-ce2a-4e3b-9647-661264abe674", "indicator--95bfc67c-da8e-43fb-bb85-4abaea3f2085", "indicator--84f76709-c2cf-4c7f-b428-be4e20951c5e", "indicator--f7a075ad-5c7d-4256-9caf-440483852c7b", "indicator--e36cdb41-acd1-4f95-98c3-c27b6d18bce3", "indicator--d200fb7a-b7bd-4499-aef6-dba85fb9419b", "indicator--931376db-2149-4125-84ff-b712b85366a7", "indicator--8dc0d1e8-20a9-40f4-a68c-c740b72b901f", "indicator--b96e0398-015a-4a98-8039-3e1264c9b639", "indicator--c37c7ab4-ee53-49be-a364-1bcde16c5e20", "indicator--7f6146cc-f7c2-41e9-ac6f-a18bad3f65e8", "indicator--1d55724a-b4fe-42e6-9e55-4d9de6467464", "indicator--3f6ae5bc-82d0-480a-9557-1aee81c55840", "indicator--1b805b97-51b5-421f-82c7-1b09e06d35ad", "indicator--7dc62300-b1c1-4907-a06a-5b9d58eb1706", "indicator--40d6737e-0d90-4a28-915f-c171f9bb1245", "indicator--d20801b7-b70e-4add-bea9-676c784f04bf", "indicator--9d5cc8a8-9e1d-4329-999d-2c77b00225eb", "indicator--af6d3a56-ebf7-4f36-93e5-9f303f7b3c2e", "indicator--2e1dd51b-83ea-40d2-9267-546057a88538", "indicator--9955a0c3-3aac-401f-bd29-f55f938c4fa5", "indicator--81ae2fa1-e160-4881-abef-0961e1543a9e", "indicator--a0cf0bf6-0d48-4bd9-81ef-da86477b6245", "indicator--467ea5f2-69e0-4bd1-8c24-eafbede45b07", "indicator--dbccf5cc-1b45-4ebf-9058-d1102b8329ec", "indicator--1b0378a7-2520-44b0-a17c-78bff46150d2", "indicator--2e9f0da6-920d-41f6-bf91-762f78be4660", "indicator--4be89588-b285-4b04-b2ab-821b925313e3", "indicator--5a4bb63e-31af-4a2f-8b84-195f48d9bb68", "indicator--f948868d-b785-4833-bc8e-8f127176487f", "indicator--7a0ef005-7197-4a12-8b04-57e57777b6e8", "indicator--9e80e11e-6c35-4afa-bc22-296655792375", "indicator--f31f2154-4959-4e29-9adb-147e2c1172fc", "indicator--9c9bd13f-d992-4d9f-8fb1-c875bcb595c3", "indicator--7a0395ab-fe53-4951-b806-f690a293ee19", "indicator--04feac1d-a38b-4f13-907c-f676e0b6eb98", "indicator--0602c83d-6db7-42a2-af29-752c1810c871", "indicator--3341a244-ca98-437e-95dc-72a74f6b15a3", "indicator--31660810-4d07-4726-b44d-220947a011cf", "indicator--5799a9e8-aafc-4ed4-8be0-8ac2982997c0", "indicator--f3c5ec42-f440-4aa9-8f58-25fbf90d6385", "indicator--78f59f75-18c0-4cc7-836a-ce436c78cd5e", "indicator--742b0a35-1a1c-495f-8716-f6cb458e7264", "indicator--c03517ee-a4d0-422c-b029-d34b3b782080", "indicator--33e8a551-dab4-4f93-b142-17f5cf3f1dae", "indicator--426f0841-343e-4ca8-ac51-e2715ccabc26", "indicator--118e00b6-69f2-4dc0-865d-7f71fc28eb64", "indicator--263c470a-8730-466f-9e3c-e4c40e0ffc79", "indicator--e1b58a71-55e6-4b5f-9ab5-830dc88bbf8e", "indicator--43e10bc4-2fe4-4e58-ac26-09013f909e82", "indicator--fe2588a1-aa0c-410e-abc1-f7bfd44504c4", "indicator--691430cb-09b1-43c2-afb6-c0025bfc924e", "indicator--7a1f5822-3026-4cc9-8d70-392b0e78003d", "indicator--1556f9d2-5602-4365-9a3c-3b7abb3a1fa8", "indicator--68cd99d3-5398-4eab-bb26-472435612361", "indicator--185ba86b-75ee-4624-8efe-433a461a5e9a", "indicator--37659292-c0ff-417d-8e78-4811ce84532e", "indicator--6734acaa-9d0f-4699-a282-bab862c64ff7", "indicator--efd59777-8ec9-4aa2-b5f5-f88270d53659", "indicator--840eed9b-0d5f-4e2e-a627-55addfc6b0e5", "indicator--79bb06b0-f35a-49f8-aca9-51e99eb0e031", "indicator--a1032802-d2ee-44cc-a8d5-14df1019ddab", "indicator--66bfc895-0998-403e-b657-8da833c3cf13", "indicator--d138e352-863a-4dc4-94da-143895a3b05a", "indicator--671b8d7e-e10d-4dbf-aeb3-6169f7a10702", "indicator--ca2d4451-dc95-4294-84f6-441182b477da", "indicator--399d7ecc-9027-4b07-b7e9-dca970a11509", "indicator--e2ddeb94-12e2-44a1-b833-c96cb2295252", "indicator--bfcf694f-499e-44da-85a4-89a2ac1a9c66", "indicator--5f64a092-a1f7-436e-a536-7480201833c9", "indicator--0b8db54d-b1d5-496d-bc98-bf436f3a3ca1", "indicator--6a57e959-ac48-4a7d-ae4a-b2f54c8a5270", "indicator--5e2318fd-1c68-4c9b-b1fc-66c1e6aa5105", "indicator--e35b6e2e-19e3-464c-ade7-99be77f25d12", "indicator--de0c97d0-0856-4cc4-829a-ff072d7bf1dd", "indicator--0df6124b-fbdc-4338-8cfa-83af2fbb3908", "indicator--c944a453-5873-427b-af7e-4ad88cae9ed3", "indicator--e22d1f37-d225-4600-a8ba-d27a0971e919", "indicator--b0e4f0b8-e4a1-42a5-93dd-d0f656110940", "indicator--f8f406d0-cf43-44b7-a95c-bbf03005b758", "indicator--c709235a-0fb6-4e89-b9cb-774a84038fd6", "indicator--a33dc6a2-ff0f-4e03-9d81-49e9e7465aba", "indicator--a97f7ba1-5496-4b50-b506-5e3e6350a6e7", "indicator--cf3de44b-8b0e-4192-9465-02f6d3b45417", "indicator--d25d73a2-b05d-4bd3-bcbf-d65bc9c9da13", "indicator--9606ac97-dbe3-4376-a8c5-e5399d7ec6a6", "indicator--8f58fdcc-65fe-4cf4-8a59-364375825f78", "indicator--4255aafb-3171-4096-9ccd-ccf108a59825", "indicator--b7145852-c543-4e04-95b7-5cef718f58e4", "indicator--1ecc8132-588a-442e-8d94-9d0ae09a4515", "indicator--b2424110-fdb3-42f8-a585-3ef275acf9a1", "indicator--8183ab87-7cc5-47e4-96d3-e1efeeb22171", "indicator--6878a168-6eda-4aa2-8925-66bddfc13dfd", "indicator--7f789d87-063d-4daf-8b01-3c5615456d9f", "indicator--3595d363-e0bd-40f5-a71f-8135ef4a509f", "indicator--5a613922-29a5-41ed-97bb-694a3e74f988", "indicator--8d42f7c3-fa83-4dd1-b150-c78c9bdce32c", "indicator--e8a7cb89-2d44-4e8b-b99a-71bcdc12d47a", "indicator--a8463b5b-6950-49f0-a7e8-9eff23524bd1", "indicator--e008aee4-afae-42ea-b8b0-72da232b839f", "indicator--886019a2-0be4-48ac-80e2-eb9e93f51694", "indicator--6b9990f4-6407-4c49-9542-0606e73e8d9c", "indicator--14a01823-406d-4a28-bfdb-f34f58f60af2", "indicator--c9b997e0-52c6-47cc-a5c6-9653ae447514", "indicator--fab0212a-80b9-4522-8992-c2a4680a677a", "indicator--561dc86d-8363-4169-bfac-9ef4cde9ad42", "indicator--7176aa33-dbff-48d4-a4e6-aff5fa8e6334", "indicator--c13d5cf1-b960-479b-a41b-abc56e33ef51", "indicator--ce4e121e-fe9a-49e4-8927-9ed7fac42feb", "indicator--afbc6525-a5cc-4de4-bd93-86250c438a38", "indicator--309bf27c-8cc9-4f6f-aaea-a935f55637ec", "indicator--3e62bf0f-adae-4bb9-949c-de6f6aafcd23", "indicator--5f83e71d-f42b-4e06-a7e2-624d7aa17584", "indicator--b1f43693-cb02-410b-81de-22f8cc8413b3", "indicator--27258cd8-c833-482b-9596-7deb559e490f", "indicator--d1b44c03-45ae-4aed-8dd1-563f56c41d4a", "indicator--c788b2c1-2feb-4d5a-80e7-f05fde2aec74", "indicator--4ae4c388-967e-45fd-80e6-ed30b588850f", "indicator--6227d85c-c123-48e8-b190-92c94a263549", "indicator--7ba70ddb-ce49-4ed7-babf-26adaee6e55f", "indicator--ee86c481-d7ff-4259-b4fb-cc2fc48e7410", "indicator--48e64904-7b30-458e-9a2a-223e3fa4b6d3", "indicator--550f0ee9-faec-477b-be52-93e03e5a07f9", "indicator--80e1866c-304d-4bce-8b12-c8d3da3bcfb5", "indicator--3f9b8431-3ff8-41fd-9e8f-a91116adbc0c", "indicator--11be35d2-2568-44f2-8989-6c76b791b11d", "indicator--c546cf92-b3ae-4924-b14e-64db54309f03", "indicator--efb3d03e-6d6a-4daf-83f5-90dc5b49189c", "indicator--211635a9-a4a9-4596-bb27-4e6cfee9e1f5", "indicator--b94282ab-6c04-48f8-b4d1-7435060e4ad4", "indicator--234c7de1-c630-4f9e-a321-925d47084af2", "indicator--859a432a-4c42-438f-8aec-7d8cc8ac8723", "indicator--f97729bc-a8c1-41cb-be6e-5ab82cc1e003", "indicator--20e5d98d-aef9-48bd-8cf2-95b950e53c6d", "indicator--c45d8082-b3c2-4e73-a25a-14bbbd5767fe", "indicator--8acd109d-d2c5-477d-84f6-62ae98f9e73a", "indicator--b043dff0-91c0-4506-84e4-60aa66bc7fe0", "relationship--3873ddd6-c11a-4b6a-9976-c23a8ff28242", "relationship--0fb59408-410b-4bd7-8a0a-7f98beeed1ba", "indicator--dfd23a13-0b15-44b0-b649-2cf59c9a8466", "indicator--a1f27d83-a979-4881-8b8f-ab97a9b69f6d", "indicator--92fef314-71ac-4e00-8b4f-e36f3fba9a71", "indicator--fde42c27-b59b-4421-96a9-0df979e78ce4", "indicator--120e7567-9cc7-4b09-8f97-3b1d493a509c", "indicator--86dabb94-0ca5-4c0e-a4d8-82d86af024e8", "indicator--8968cc11-895f-472f-8032-e1b980e7d558", "indicator--05c3fc7c-fb20-46dd-80eb-ace025165b22", "indicator--db8582f0-6e4e-4bf1-adbd-93d772f0d705", "indicator--f0172f3f-b492-46a0-81c9-942254c7e143", "indicator--16713ed2-47bb-4606-9e62-4b824f868b03", "indicator--262db50e-b896-4d42-9aa9-9b6985219461", "indicator--87acc506-075d-4344-b508-c50318a43bb2", "indicator--f05ebf92-eae2-4d9e-bce9-fc1c44b6885c", "indicator--e3bdddb0-521b-4a67-a543-cad2740ddea4", "indicator--07386595-de82-41ff-97a9-b35cf5ea2c5e", "indicator--546b3ac2-e1a9-4935-b7df-f906a42d2f13", "indicator--29d5730c-0f7b-4a0a-9102-e239a47ae386", "indicator--b92647d8-7c53-4e35-bbdc-7cfc55b27259", "indicator--1367b444-cca5-40c4-a0ae-d6077dfec173", "indicator--ef778810-c6f9-4205-9d43-9237e5ac0839", "indicator--40597d4e-f378-4da5-9d73-2baf53365759", "indicator--d29ea9c5-28d9-4f70-b6f9-0bb98e442725", "indicator--b3261231-9dba-43b7-80f9-631b2b28b729", "indicator--a1133282-d4fe-4855-abcd-51a641273c56", "indicator--0c90d991-3263-425f-8dc4-74a261efb9eb", "indicator--63d75705-cf3a-4aa5-a4af-52364956dc5d", "indicator--c4c53d40-22a2-4f78-aa78-c35bd9f7f98b", "indicator--38322726-ebc3-40c4-b985-9f05879b422e", "indicator--a7f88fdb-89a1-4aab-b542-9d3e0229afab", "indicator--c0363fda-c5f9-4c31-9d33-902c50d947a6", "indicator--751dfded-c564-4b6d-9385-ee38c68aa306", "indicator--dfec9dbc-11b0-4b94-8370-3d121870c563", "indicator--a0af2f1c-1e27-464a-b794-97be77cfb3a2", "indicator--4ec003f1-c083-408a-b3c9-bef52c33c9d3", "indicator--b0fe238b-ad06-4cc9-87cf-44759fca9381", "indicator--b253b150-2fca-4a20-86f7-9d8f9c5bf13d", "indicator--51442d6a-1a24-4669-808c-2456bda0792b", "indicator--c46c66e2-9b77-4d9b-b5e9-8be266fcca52", "indicator--3e44ee0b-e23a-40c4-962c-dfa047bfecc1", "indicator--62697775-f907-4c56-b749-19c82e37059a", "indicator--2e1d49e2-234b-4522-888f-d5eb587b4632", "indicator--e7c375ae-7e83-41be-a205-4d3ecac27ed3", "indicator--a94d7a87-d056-4781-84d3-0d94e47f2281", "indicator--3c99009c-b52e-4e8b-8f60-7e0de2bb3405", "indicator--001eab67-8996-4474-ab2c-569b31c95e32", "indicator--149196e4-80c5-4707-9521-2d3f840b5273", "indicator--3047c023-aea1-4693-8d43-e9636b8809ec", "indicator--b3899bba-e4e1-4d06-9ad2-0f9ebd81e4e2", "indicator--4a028bb8-ef62-49eb-aca0-a12d4eeb2945", "indicator--184380b5-a315-45ac-991e-3ef3093df576", "indicator--57055138-720f-4b82-a12d-4e77111e824f", "indicator--e65ea50b-b2de-4cef-a0f4-fdf91cbcbb7d", "indicator--4fbaef17-9851-4ba6-ae91-cf0f5b12db87", "indicator--3db8ea1c-cd7c-4a65-8d63-1c978d32f016", "indicator--5c27cd85-9ee7-448a-8fbf-8a9e4139a390", "indicator--dc2f8e2a-cad3-49de-91f9-b822f69326e9", "indicator--b7bf8ccf-3c95-46c3-9010-7888b36ad6d1", "indicator--60f120c7-77eb-4a67-957f-d3f4a6c0e4fb", "indicator--f8e5635e-ce28-41cb-9649-9f31b9bf7c6d", "indicator--bb76152f-a482-4643-bd04-f7777ab65e20", "indicator--3da0d8e6-3ab2-420a-90cb-19fba79fe1e2", "indicator--9d3df178-a84c-4223-be6d-c6b1fd5390bd", "indicator--d37f422a-4111-43b4-bf3c-b543b69b00ad", "indicator--e47fc163-1ac8-4ebc-bd61-53a8a8f6d3d8", "indicator--d375cac0-ce96-4cac-a142-f2b5b2fc2940", "indicator--d19564a6-878e-490e-ae6b-f2573f80ba76", "indicator--03047f0e-46c4-4b68-a5eb-5da44a8b6000", "indicator--aece048e-22ad-4609-a3b5-6bcfedecdad5", "indicator--2ddb5daa-f34c-44ef-b94e-39a9b11c5035", "indicator--5aad8d03-5f84-4380-a5ce-7342ec02936f", "indicator--f62a2c55-343e-457f-9a22-284a9f0acb46", "indicator--1703d544-b867-4ef1-acfb-8b7996f4d65e", "indicator--8e714783-221e-4851-aab3-3d60e815bdb4", "indicator--b5f3e2a4-60c8-4c38-99e0-f3626f3b45c8", "indicator--09c405ce-0144-4e13-85cc-6194e6be7080", "indicator--9a12a528-e900-4d5b-a22f-e561648f08be", "indicator--c2007725-36cd-4d00-a6ed-e9a920f2e0a7", "indicator--0b0d1e2f-e124-465b-8fa1-f34f1d9ac25b", "indicator--3cd8449f-d224-4216-ae06-7491d27aecaf", "indicator--fbe9514c-29e9-4714-a077-274f32c7ce8c", "indicator--1aa98c40-c280-4926-b2f9-8bf5a332b131", "indicator--66ddc7e5-c4ff-4ad3-b7fb-64a5d656357d", "indicator--e12f0cb3-42be-42f1-be4b-91806118b580", "indicator--723d0cbf-c3b6-4c33-8750-96a5895634a6", "indicator--967bd95d-67cd-47c3-84c4-4358298c0e3a", "indicator--6f5a8217-6c36-4b7d-9ff0-4b1a9cfd6b32", "indicator--de484413-efa7-47fd-a082-d770ccd25532", "indicator--fb1d4904-8487-48c2-b327-e150b9289b13", "indicator--3bf612af-b372-456a-8555-193300ebb3f7", "indicator--8fa44e13-8632-4490-b9ce-3bee36e791f7", "indicator--a2dd065b-b264-43b3-ba5f-6d08e3a4c998", "indicator--75f903a1-0eae-4737-a622-cd519b2bd436", "indicator--0d3d8df7-0e4f-4802-877f-1ea4732e4243", "indicator--52e9cdaf-0ef5-4063-aec1-714c72beba8c", "indicator--37ebaf0a-bc50-4bcb-86cb-9eaf1a0e35cf", "indicator--004c1cd2-c857-4d58-8502-37488210e62d", "indicator--cbef86ce-279a-4aa7-8e1f-540ddcf47520", "indicator--8a9a2baf-b7e2-4276-b156-e62feacaac29", "indicator--ec976508-cb0c-4dae-bcb1-652790e8e5b2", "indicator--abc0cbb3-6bce-4045-ae3c-65502515a272", "indicator--b1cb6dcc-fc81-4aeb-b8a3-19cda493d8da", "indicator--e4f41dda-c93a-42f6-9506-06f0c43026c3", "indicator--ddaab81b-6c06-4f8f-b3a5-fca431fc34a4", "indicator--6d19c45d-a512-4ddc-9bb0-ee17755bf8bb", "indicator--c7c6b3d1-14f0-498b-984b-e6054d43ebd7", "indicator--02179fb8-859e-4daa-9861-0d259b907411", "indicator--db4db20a-ce14-4220-b5df-edf2b2dfb986", "indicator--74bbd7fa-f1b6-4bda-9e88-22a301e73801", "indicator--a0e4ba10-563a-408e-b3c1-46f75557200f", "indicator--c3a9b366-4989-4b27-b49f-1e1368f18c2d", "indicator--8cc969a2-a267-4620-8d93-05dd0dca5c8d", "indicator--21464397-97f2-4330-b326-95fc618c7838", "indicator--36fe7e97-cff2-4b50-98ef-8beada50a5e8", "indicator--89063d5a-ed2f-414e-ab4f-89d1ea847f9b", "indicator--2036fcac-cf7c-492d-a210-0182b0333597", "indicator--b8197e9c-562a-478d-9522-3e91b7eed391", "indicator--9c0a2884-6106-4f1c-9320-077d78ea063d", "indicator--73713ccf-2233-4c31-a9e4-df01caa7dd0b", "indicator--a04dceb9-6b39-40c1-9b3f-08ef4f4690e8", "indicator--8eed792c-5aeb-45b5-abc5-6ca7394f421f", "indicator--0643fe55-0c53-4633-8832-b4e45908a6db", "indicator--81a951e4-00f4-4942-8b24-46f5f5f90ea3", "indicator--06d30ea6-a668-4f14-9624-eaaabe974e05", "indicator--7e3e5452-5ad9-4e19-ac44-7906fcb67873", "indicator--2d9d2021-8253-4d3a-9c39-db344890390e", "indicator--fed0a958-2fa9-4e4e-af87-a276707bd748", "indicator--b2454550-dde4-4afd-a561-92b5fa596d01", "indicator--b3a9a3bd-b4ab-490f-87d0-ce0c859b31c4", "indicator--52bf7e2d-ea44-44cb-9c0c-813cd0b3613f", "indicator--4ce0603b-1761-466b-9dce-a0b0efc9da4b", "indicator--94a6a7c4-9ef2-490c-a101-59123fa4b2ca", "indicator--d08818c7-3b6a-4cd8-9d04-26b1c055889b", "indicator--1730d1ca-5a5f-4cb3-ad73-78f6137b35d2", "indicator--16a92783-08ac-46bd-849c-76605f2a0c9a", "indicator--67ed1b40-37cc-4596-bf50-f5b2066ff3cf", "indicator--c338c546-227b-4de0-81d0-0d10fe57c5a4", "indicator--fe4d921a-14b8-42fe-a41d-89c7207c5960", "indicator--49d896bd-4cc2-4f08-b5d1-54e108eccde5", "indicator--c0cda9ba-6436-46a8-9f39-7a11d218ee1c", "indicator--f5a41531-1dba-4eb7-9e73-ea9d7971cb18", "indicator--491cff7a-3c99-4060-b8f2-3cc3dae3a33a", "indicator--e6396fbf-e9c2-4722-9386-ccc2b6bb543b", "indicator--fd093b6c-73ef-40dc-b542-eddc6321364e", "indicator--17986c4a-db55-4452-9b9f-b1607fbccfe3", "indicator--5ecc0a99-7d78-47af-a398-876d4e4a131e", "indicator--5cdbb9dc-079f-4a1a-815f-a0b995e2c551", "indicator--0e15f891-2c8c-4d2d-9ec4-3378d6c1d618", "indicator--d6e0ef5a-65cd-402a-9643-afdb030e06f3", "indicator--4f6d7516-bed9-4725-8cb1-36284d0a603a", "indicator--0ae6440d-4faf-4434-af83-7f954202053e", "indicator--eb7c4695-ddb4-4163-8354-3f7f228859a1", "indicator--ba5d5dfc-f122-4c40-a75c-1fc45e47b18d", "indicator--547cdf6e-413f-4fdb-bb01-15ad35298ee9", "indicator--205d179b-8123-440f-91be-740cc14fef78", "indicator--29429953-2217-4a2c-bd23-cd42011fdfe4", "indicator--18e20ada-f9e2-4955-a279-74d9350b36d8", "indicator--ec9184ca-06b4-4742-bd75-4a4a298296d6", "indicator--c0ba5c47-edc3-44a5-9da1-44daf7bc2afb", "indicator--d7bb6163-809b-4d2c-aab5-5c150799b496", "indicator--a8b62338-7761-4a23-8158-15a1c412914c", "indicator--96673325-f3d6-45a0-b4ce-f67e1090fcc9", "indicator--f460c4c3-5f66-4806-81f9-4f04b09549dc", "indicator--6c7a9d4e-5774-41f6-b94b-43d42377e9e4", "indicator--e0ab567a-0fdd-4e4b-b07c-a169b4e86496", "indicator--5150dfb5-427d-4527-a591-54800ee4d6c9", "indicator--b40c5ead-70b7-4ebe-80ad-b2972f0c04a8", "indicator--b8793eb4-9605-4d97-9821-67838d231cc6", "indicator--950e3651-8c0b-466a-9d02-0cb5aac55221", "indicator--be99e191-b5c4-4922-a072-b4c3bd7ba3c9", "indicator--4894b9c5-1282-4937-94de-c35702a74d3d", "indicator--4d6e5341-2107-4d36-a45c-2fa0cea77ab8", "indicator--a947d910-c3f0-4c41-a575-c6e95c1e58a7", "indicator--db376420-beb3-4632-9f39-3fe8d0aaa96b", "indicator--129779cf-cc8d-4e1b-ba4a-e7db89bf5684", "indicator--130b492b-0218-4374-b656-106e8f7a1b62", "indicator--17737dc0-e462-49ae-9109-83908fe7d448", "indicator--c839a70f-4368-4358-b69c-70ab1b2cbbcb", "indicator--36f25ecd-7afc-4aec-b0ea-38ea44f49e55", "indicator--677ff844-0c3c-4193-b43d-c212ff3844e4", "indicator--abd2dbb6-698d-4f2c-86fd-868a348a0d34", "indicator--1b036641-22e6-47b8-bc72-12661b32e30c", "indicator--35cb61ee-23d3-46c2-9aeb-134425f4cdf3", "indicator--c1dd5787-d9b3-4900-98af-0c7426b266c1", "indicator--4fee1290-d027-4cab-b09a-7707906e9fcd", "indicator--084dabd2-9bba-4f14-8efc-b9130a00cd03", "indicator--5a36a3b9-ade5-4696-92cd-86b766034851", "indicator--0bd1311d-ee15-432e-8993-20aa23c1ce50", "indicator--cc4c0715-f1bd-47b7-afff-bd3c6d923e98", "indicator--ca99a509-01ce-4cb6-a661-27dc8698058d", "indicator--3884c939-4afb-42d6-a4a4-17f513ebeba8", "indicator--8df399d2-695f-459a-9e14-86d2fcf76ee5", "indicator--8a954a19-aecd-44e6-8acc-160456ac624f", "indicator--44a2561d-7fe8-43e6-874c-cb423801fa08", "indicator--911b4e65-00a8-45a2-ab28-aeaf189e11f0", "indicator--35bc0e0f-1f33-4c93-9a60-4fe5d093c499", "indicator--198f7501-22c6-49eb-955e-b4bbc2d67151", "indicator--d6f15b9f-adad-4104-86a1-00bf5f405ed6", "indicator--0466ac2a-2a1b-4973-8524-3d29f92baa7d", "indicator--43005b76-afef-4e61-a188-3a65e80f4116", "indicator--bc5907ca-9a0b-4a72-a98d-88806928771f", "indicator--4f13dbba-0e89-4450-9c8d-7f426c03bb31", "indicator--1cfb2727-2362-46ea-8066-908c7b71c619", "indicator--3c5a39a4-0675-4d26-823f-065158cd4959", "indicator--5b84c20d-097e-41bf-b493-f8ed452d11c3", "indicator--84b96d29-c4a0-4b4a-b1d0-61c2d23a3b81", "indicator--1acac9fa-ce55-45a9-89d7-0567c04b670a", "indicator--854a171a-c643-4cdb-a070-9e6c5b8072b7", "indicator--3ddd4189-2180-471a-95a0-2ac5d777c7b8", "indicator--3a816a13-57c5-48ef-94ee-93e3f27f5051", "indicator--f9e5efd7-745f-428a-b743-7028b43245b4", "indicator--e321972f-86d0-4637-aeba-806ec1bb3503", "indicator--7228c503-5558-4c95-9f15-ea0323f47880", "indicator--94c914b6-b441-41df-9424-9cb97ac3fbfd", "indicator--5fa5b4be-63e1-4109-b251-e8b22f2e9108", "indicator--a3f3abf4-3340-4f2d-8dd5-d35f4ebc88bc", "indicator--3a4f351a-9f03-4ef4-bb4e-4c98623bb517", "indicator--998f99e1-7ff2-428e-b88b-02e1625b6f4d", "indicator--7d8299f7-c3c0-40eb-b0cb-5bd89e273dae", "indicator--fe2b8bd3-280e-44c4-bd77-ceda45a2577d", "indicator--900472f3-f2e2-464d-b841-cc1a2958a27f", "indicator--789a63cc-f17e-4df2-a216-066cb90fcdcc", "indicator--f4cc84c1-6380-4215-bdc8-8d7425b27066", "indicator--350f8faf-0a96-4aac-8183-a1fc8830ca4c", "indicator--2059f2a6-d4b1-48dc-81e1-180eed50a8e7", "indicator--699572b8-305a-41d7-9b3b-51219e0ec4bc", "indicator--0c9f509b-eea8-45d7-8ece-c91e59ef7d26", "indicator--a9b78004-9e97-4f3d-abe3-a17ef6cd74e8", "indicator--f72d1faf-f0a1-460c-ae96-a0138a47db97", "indicator--362a043d-b14d-41f4-aa03-0db32acd0101", "indicator--675ad762-e5a2-486c-b7af-e1ea19c8666f", "indicator--00f0796a-8a06-4e08-ac7e-245f8b2d0937", "indicator--4ba4a15a-9bf9-456f-81e3-f98897c14b75", "indicator--cb70f293-bcfc-4107-96f8-1ed0bf5fa004", "indicator--a1feddbe-4bc5-4322-bf8c-1ba17c76f572", "indicator--43ce41d1-116b-492d-8aa8-309557894d59", "indicator--95176b95-f424-4742-97d8-44b82e16f12b", "indicator--bdf0c86b-0986-4198-ba9f-819043aaa381", "indicator--e19c1a0e-0994-4faa-a7d3-79cf272f5856", "indicator--9e219e05-c6ba-440b-9446-69c6edf6efef", "indicator--fac106f4-493c-488e-9eaa-8a4b08038d6c", "indicator--a86053cb-79c4-4106-b6dc-6e89a3647844", "indicator--58e942e0-3953-4425-899b-b047b30ccd6f", "indicator--27c2018e-80fa-4bf6-a450-f06ff8e2dcba", "indicator--9172c133-a759-4e2f-99b3-03b1a7cf114a", "indicator--88e73adb-c2b7-4495-9989-77aa2043be58", "indicator--3c12a7b1-c756-4740-8389-d034d57f3ff8", "indicator--560386e2-283e-48f0-a9ef-f17267df8332", "indicator--903e8a95-85f9-4ee9-80dd-5e7d5edf9578", "indicator--25699f7a-acc6-4419-a57d-d7d3b902ae41", "indicator--f05db71a-a8de-4ce6-8681-558d0d7be96b", "indicator--003d7a31-af1e-4eb7-b97a-944b90d55196", "indicator--3086b247-9b41-411b-b2ec-d8db7e950967", "indicator--88fe241d-9dfe-4706-88b6-d603fa816053", "indicator--b6a3beca-6eda-4a0a-a393-6cf2572456f1", "indicator--d912328a-d725-41dd-833a-1c90af152433", "indicator--69857c85-7886-43c1-89d0-878680919c49", "indicator--bcc0f90c-856a-4523-a957-48cc94e63c32", "indicator--cc7fb9da-787b-4aeb-ad12-33da4611664a", "indicator--fa44f493-c43f-440c-8bae-1f33aaccc74b", "indicator--8b55e9a3-e84b-45fa-9874-755a4f9cc648", "indicator--ccd2be39-63ab-4ce8-8c3d-155aeded428a", "indicator--e6577d94-3996-495e-b220-842786472cb0", "indicator--d76cd727-e4ff-45ce-bbe7-91f83fc29b8e", "indicator--3d793e7f-30c1-42f2-a4c4-f06ed4f1e3a1", "indicator--077ea86f-8308-454f-8ffa-d8a14ef0db7d", "indicator--c1c2d5c0-3e80-43c9-8b13-d2eae4cb8d8c", "indicator--f8771371-bea2-4964-82ff-0fa679b9485c", "relationship--06257db2-18cf-44a2-876c-33a60bea4d0c", "relationship--69156c37-a38b-4830-b830-303264681acd", "relationship--97b41cd2-f29d-4a2f-9fa6-4e1dccdaa40c", "indicator--2f09a684-321c-48c7-b8ea-0e9565c6393a", "indicator--a2ad8ac7-78a8-445f-b840-b57a89322304", "indicator--a55f387d-7d1f-45be-9484-704d2682726f", "indicator--d3a9d88a-8df5-4528-b497-88d9ac8a31e7", "indicator--379d8b1a-2109-47e0-b071-1554661678d2", "indicator--588129e8-9b26-497c-a93e-d1b90efedda9", "indicator--38fd40f6-b5af-441a-a5c3-29838894520b", "indicator--c6cc4ce4-a89d-488a-a34b-d077a4cea4ca", "indicator--a8685617-f0a9-4067-99e8-8eb507885ed4", "indicator--cac5f327-9001-47df-b1e8-eace7b2d2f36", "indicator--d822dac7-4f95-4e14-ae13-a2fda4547b28", "indicator--acced0e8-53ec-4dca-9677-57d0f15ec27a", "indicator--0c7206c4-3859-433c-bf71-b3df41e605b8", "indicator--346e91f9-f56a-4d29-8cad-f4edc0d2cd16", "indicator--a7cb599d-bdeb-4e6b-96c6-09a60a9b77b6", "indicator--598b144c-35ba-4162-9ee2-d76849bed6b4", "indicator--5c190b87-e1d2-4286-b7cc-3241ed03da68", "indicator--f5c00605-af3f-4e9b-bff9-925f54e31f75", "indicator--d34f7301-2884-470f-9064-0336b6a5d6d3", "indicator--dc95b330-6aa6-41f1-8b76-82f8168b41b7", "indicator--f6908cb6-4ea5-475a-bd38-d36d9c53ecc4", "indicator--f58a26a3-4e9d-4018-8e91-f4b03a6c8261", "indicator--27b464eb-5dd2-4650-9e2e-75a19965a52a", "indicator--8c2cf527-9d96-415e-8278-a4b36bbebcd5", "indicator--d6e9eb9a-d0bf-4946-96bf-97183aa57c48", "indicator--d86b958b-2ea0-4fc3-817d-6a9c84b5fb0f", "indicator--0cfe2fc7-d1da-40c0-a64f-569789505531", "indicator--1d125ff9-ecfb-4375-a607-682895f2b5b5", "indicator--20126e6f-a31d-415e-ab79-dd5060bec2f8", "indicator--d65f5f66-8f66-43f6-9168-9e490034511a", "indicator--52a12afd-c066-4603-9f6d-7e13fee170d5", "indicator--0052282d-20d8-4dda-8988-f3ec74d932de", "indicator--d0bef29c-70f9-4f2c-9be2-eff9a8d741a7", "indicator--31962229-79bc-46e2-9878-a9127a8b7516", "indicator--6d84ab53-5fb9-40be-937e-f153780c0d4f", "indicator--17ffa3e0-8140-4cb0-8715-a416f3cee4c3", "indicator--8b757201-3db9-4f2d-90a3-67d079785893", "indicator--31584751-0dc2-4a2c-a343-27052ead59d3", "indicator--8f856c2f-1570-44db-a982-e7097c76b87c", "indicator--826ddb27-1976-427f-b693-5be4067ff3e6", "indicator--6ee72bba-e9f0-4723-b217-e17cca2f5cfc", "indicator--1afd82a3-3b8e-49e6-bc9c-480531809347", "indicator--79780265-e840-4569-9a54-b748cde8bd31", "indicator--ea28b463-5574-47a9-8396-9e9c23cbec95", "indicator--208152de-8fcf-4948-80e6-b591f19d0dfe", "indicator--77988f4e-a18a-4c1a-ac5c-06c5194d8158", "indicator--24ffeee5-3212-43ae-92d6-12e4a62c6ff1", "indicator--e2a1bb7f-299c-4cd4-a956-2902d3ed3a86", "indicator--2bb0adab-c571-4926-a6f8-a8e1c6c30f0f", "indicator--e0c46c20-e3ff-42fd-a6bf-6db044963f50", "indicator--2d4c653f-9709-4e8d-8174-0516db09e6e7", "indicator--2f2e5835-da7a-41b6-9979-0672425770a5", "indicator--9cda27ff-5a76-4045-b9f3-c7517cf527e2", "indicator--580745d0-bca5-4189-85c9-be42a186416b", "indicator--e1b511da-7f0f-4067-95b4-e383cb6a5924", "indicator--46437c31-e0ef-4016-9d9f-956ef9095d35", "indicator--820f39e9-9544-4c7c-aa70-3dd74b38a5f7", "indicator--63d37786-98c3-4796-848e-947d105ea86a", "indicator--d66295bf-6740-4a05-bda5-4e5d2410916d", "indicator--2f22e288-06a5-44c2-ad01-30dec2733669", "indicator--f4d8c15e-1b69-4426-bc9b-5480441ea9d7", "indicator--a485506d-320a-42c7-ac83-657f089fd499", "indicator--674d586e-44a2-42c9-8756-432af0454aae", "indicator--387f3572-16b1-4e68-83bc-f7b9cee03917", "indicator--4ac45c41-12fd-46c0-a6c6-dd7e84454e21", "indicator--9f4621a5-7b6c-4330-b8fe-0957cc598a9c", "indicator--413dc46a-998d-4d56-81dc-a5e9a9575868", "indicator--97a0457a-6e84-4883-b683-d11962751fbb", "indicator--06e279ae-a7c7-4793-90eb-bea5be3f0e76", "indicator--91346842-8e02-4dbe-be0a-683f7e84aaf1", "indicator--ad59ae28-b764-4435-9bdc-da56f0cabf4c", "indicator--674e8824-7e44-41f2-ba3f-c0d36df800d5", "indicator--cd2403fe-008e-44f5-a2c3-9186b77b81af", "indicator--60b40fed-f22f-4d0f-bd97-824ca6548042", "indicator--32ad5ec1-ba56-4e46-97ef-a9a96af1776a", "indicator--c961f64e-f9be-48ab-a385-33cf0610deb0", "indicator--5f956eeb-1139-460d-8920-4925227ec74e", "indicator--cd93d3c0-da3f-4357-bb90-06c37aa4a5bd", "indicator--05749d47-e569-40b7-94c1-e98a71468de2", "indicator--36037253-fe72-4554-8680-bebe4c3dfb6a", "indicator--6bbd3a4c-fd2c-48f4-9c2b-473d78b8d6a8", "indicator--c0bd8f1b-67d0-46f3-9867-c1d955476280", "indicator--3796becf-1f57-457a-9f70-b01287c9919a", "indicator--ad31c6fd-8663-4f70-8260-9e2266f7a842", "indicator--76836ec9-b57e-4e9d-98da-b3dc70f87369", "indicator--c38e6ea7-5538-40ad-9c6c-68b9d86186b6", "indicator--87a7d6a0-530c-45e9-8407-613a8f08cf8f", "indicator--2bb4bb94-b4d0-4224-93ed-8aef5f06f2b1", "indicator--eef5f1ea-a07a-463c-9c7b-aec482c6eb61", "indicator--3dd7e9e5-ac88-45f5-873c-100e00ebd929", "indicator--218673f4-bf11-43f3-a263-d1cf10a13ed0", "indicator--1f66af33-1fe3-4ff8-9a7e-2d8dacf94ad7", "indicator--c7ac9c3e-0da2-449d-be8d-3d34ff1c4be8", "indicator--8e9f0c14-e933-435e-975f-f9d58d004767", "indicator--7f129d5b-69c2-4183-bf0d-4ae52e03ab60", "indicator--19182d28-95f4-4d42-b294-1e39d53038ca", "indicator--40a2982f-2413-4b5c-b439-1119c502d106", "indicator--e881d129-5787-4ee5-9c01-0492a4d4972a", "indicator--73c4fa49-2f07-4f78-a0c7-eacadcb7f05c", "indicator--a8779aec-37be-47da-90a5-8993cb514054", "indicator--f54350da-f180-4c08-bd82-02893c24bda8", "indicator--812e6112-24f1-4243-a767-4ae58d70dd2b", "indicator--fff0d0b8-a22c-4276-9a99-fb8b05cbf7ea", "indicator--f1575199-6e60-472b-a9d5-f472c146ba22", "indicator--62fddfaf-c81d-49ef-9468-47115e1c6979", "indicator--6290681f-3a04-44b9-ab09-0646c7baa23c", "indicator--9f877d7f-acf4-4218-b695-730180760789", "indicator--e9c8be76-38b8-494c-b493-eaa6389852a6", "indicator--fca49c31-1a40-4247-98dd-945c7cc4c997", "indicator--8e9a21b1-9398-42fb-8da3-b29d5a073389", "indicator--26de2082-fb47-42da-a1b6-9fb2f7da9f97", "indicator--8d8a6936-9ab0-44a9-b5b0-d98f87f20a44", "indicator--e9617c09-5590-48d1-be70-afefa3048308", "indicator--1b8ad770-3013-4de3-a710-57cfb78f437f", "indicator--9b5f1e1f-f91a-4316-a65b-39f71cb3ed46", "indicator--0b71b20f-38e8-462a-a122-eb4a12bbcba2", "indicator--3e3a2c7f-9c1a-41ea-86cc-c9280ce07276", "indicator--32c7b708-34a4-493d-8a86-89a0d9a5a8a5", "indicator--7da8069d-4ac8-4143-b3d7-e5cf8ace8288", "indicator--0ac3091e-0ac2-4110-949e-b2fb5577c510", "indicator--f58c7530-8deb-4330-80fe-96e5e16ed157", "indicator--55ccdbc2-ab29-4ccb-a5d6-e6a4b162cba3", "indicator--864ac791-57dc-4f97-8532-9aea32a157eb", "indicator--ed1ef793-04b2-43e0-8ce5-22714d15c71a", "indicator--7b2a2561-607b-4a4c-a7c8-0f33356d9e13", "indicator--109fb8ca-7532-4894-b81a-09930a806b59", "indicator--eb357004-aec6-4442-ab9d-2daafeefd8e1", "indicator--44fa6968-78ec-4410-9ee8-14f3b9fd97d5", "indicator--af640e62-a450-48f1-8623-663c63108828", "indicator--daf69792-8a51-48e5-9dce-fb85231056b2", "indicator--798a124d-ff6e-4989-b128-1aeb290b15ad", "indicator--39eb4c0c-e601-4767-98ee-5028f384f707", "indicator--ddfe798d-e3f6-434e-af2f-beaede0d96ef", "indicator--16a9a741-d8ff-4ab7-8ae0-eb553f31da80", "indicator--a7e4fd80-0fc6-4918-9dfa-f910590812c5", "indicator--c37fa43b-f05b-480c-a6f1-780883c89350", "indicator--1f65c013-3adf-441a-9992-6122bb5c291b", "indicator--a0e86bd0-f7ee-4515-b19b-95a9f11b5fab", "indicator--95bde830-ebd4-4bf8-bf36-7aaaf5a422ee", "indicator--5888d00e-0c50-4b0b-bff4-ba595e623076", "indicator--cfd27666-9ea8-40ef-86a4-df53306aa694", "indicator--6dbcf40b-642f-4c5a-a1b6-5ff50c8a097a", "indicator--5eec9898-b2ae-482a-89e1-b22432cc8d59", "indicator--08dd6ad4-21a3-4fa4-be95-28242055a123", "indicator--129de615-391a-446a-b4b5-9ffc381744da", "indicator--17a60a96-1291-43ee-bf3d-0d386ca46533", "indicator--c7a3b578-e806-4744-aad8-7ccfa40a8071", "indicator--11947729-0e6b-4f23-bba7-38a4a1eeb8e0", "indicator--3f2b1681-0a26-4b5e-a2ed-69926b219e35", "indicator--83357ae9-0804-4b74-9a74-6863d93254cb", "indicator--b896a166-aef8-44f6-a289-7d47c2b7841d", "indicator--c962ea59-da97-4882-93f8-370a43d8c57b", "indicator--67e43c23-51bb-478c-999d-bd57533d60f0", "indicator--8447630f-aeb5-4f75-8da4-756fbf89c7b7", "indicator--72b15969-3d3f-4b75-8dfd-5feeea0db2f5", "indicator--b2948320-c8a6-41dd-8408-a3a81ac1d51e", "indicator--9cfc9f5a-ac4e-45c5-a404-6db813db56ff", "indicator--a250271f-2cf2-42ad-937c-41c3fd8a44c5", "indicator--56512b58-fb40-420c-a4df-dde9bd31cf26", "indicator--b221dec6-aebf-4f20-8d05-e5b5411141c4", "indicator--dfcc6e98-b997-4da0-be38-d7f54de2416d", "indicator--da46b957-b3a9-441e-b2be-7060baaf101a", "indicator--3c4ce3ff-be19-41d9-9394-2eda2dca48a5", "indicator--caefcdd9-526e-47ce-8891-9f6a7696b87b", "indicator--cce4dd25-72fc-45a2-8c64-e020459109fe", "indicator--afcea182-a2ea-44bf-931e-3481eaf9d663", "indicator--d2328734-9f99-423e-b1d5-405764fdb416", "indicator--49b1848c-03a7-458b-b6e8-67df91c89e67", "indicator--0ac886e7-e82a-4566-9eb7-1d62e07eaefd", "indicator--3868ab75-1f88-41d5-b095-0ab498a573c5", "indicator--edec7ccd-540e-408d-9112-cb04b678293c", "indicator--f78cae1a-3afd-4626-a540-abb2b520e3ca", "indicator--36706133-dc74-4f8d-b0f4-1b9c984dfb7f", "indicator--50389059-e31e-4d65-9f49-9ffc8834f5db", "indicator--2297eedd-2f4e-4691-8355-ea2150f70937", "indicator--e2ecdced-fbf3-47df-940e-23427b45c6ea", "indicator--3e8873b0-8b4b-4818-abe3-e757c03491a6", "indicator--4e1e6a71-1a83-4ef9-a8a4-2c21a6bbec9b", "indicator--12ff05b1-6354-4c8f-a935-de5b8527b2a7", "indicator--6a58a3fc-ba3d-4b1b-8bc2-eec2557ba81b", "indicator--17ed3bbe-812d-44e7-86df-826e0936bc6c", "indicator--821000f1-29e9-44f7-bc59-2ddb7c19c7b1", "indicator--eb52bcaf-9456-4aad-831b-2e4076399f3e", "indicator--6498dbff-3848-42a2-bb9a-f7d63d1a0679", "indicator--490811e1-766e-4029-8285-706b81a44214", "indicator--b3814310-15e6-4173-ac68-824f755e783f", "indicator--d69d7049-a2d6-4a69-8540-3e25192dfb29", "indicator--82430cad-e353-4a7c-8095-70add8c209fe", "indicator--4dda0d46-7ef9-4b5a-852b-cddc073fb66d", "indicator--e149943a-525a-4405-a78b-0769ffe71c54", "indicator--1515d348-ac73-48c1-9a15-0ec9122981fb", "indicator--d8b536e8-ce12-4488-927a-1d2914afb202", "indicator--c2175995-4330-4f26-80fd-b9fc50d602b8", "indicator--db6d37c3-6f7c-4d60-9644-9d9d92d887fb", "indicator--9d90bc5b-f824-4041-a6d8-c1bb37c84004", "indicator--aa599c7d-8f64-4b5a-b169-9a62746c17f9", "indicator--e5491902-f4aa-4d8b-a0e3-5944b9a23313", "indicator--c076bb0f-f73a-46c5-8b9e-215f366a2454", "indicator--962c4fab-6122-46d6-bf37-abbca52b626e", "indicator--0b1743b1-19d9-4cbc-9739-13dd9dbd81e1", "indicator--15e27a77-a7ec-44e4-ac15-bcb06c9335d8", "indicator--d5c2c03a-0631-4474-89b3-2a2cbb9aa706", "indicator--4373459a-dec8-4d48-9f39-9dff88853045", "indicator--c6eed2cf-2510-4e61-aa22-dc128bef6484", "indicator--3dac3d54-85a6-4140-ad52-5a66a29c3924", "indicator--74b5bd84-8865-4024-ab4d-2f07a9c92c56", "indicator--ffe9e9a4-0f90-45cf-b534-f6ff3cfacb79", "indicator--a2966ede-9cd1-4be1-90cf-fce7987fdcd3", "indicator--635b46cc-2584-4136-9743-f057f79d2057", "indicator--904889a8-e96d-4cdc-8cf0-eab7ba11a95c", "indicator--4215b0de-31d4-4c03-b859-a12b046c6b04", "indicator--96926fef-25ed-41f6-b690-488ad19fa5a4", "indicator--3ce16607-9fb1-45a7-89f7-dfaa4f500534", "indicator--8d221c30-b342-49a6-882f-6f07c7f578cc", "indicator--f368b0c9-b4e6-4ba3-b28a-83677badf270", "indicator--051ed638-859a-44f6-a338-9cba1fec237b", "indicator--4084e932-edec-4964-9f6b-f18cb034d532", "indicator--fad886d6-c0e9-4a8c-ba92-2f8e3231d3d4", "indicator--a45a6846-b6b5-407e-9372-4384a848a9e1", "indicator--62a13ad2-684a-4371-be77-c7b799129f8a", "indicator--0ac4cd77-3d7d-4eff-84d0-07343c722576", "indicator--b285ba53-2bbb-4d9e-b71b-f47151517b35", "indicator--c1afaa3e-86b7-4b59-8c3c-18c835297bef", "indicator--d30339aa-c0dd-4460-b88f-82a4bfaf5bca", "indicator--e35c4c3e-675c-4a10-8f6d-cde8a5ce9b2b", "indicator--edddde6a-4bf7-4f1f-9b00-b11db6af0ba6", "indicator--c899822f-5c19-4708-a5e3-5a623c3d2d68", "indicator--b0bdb32c-f7b0-47b8-bf9e-f46249861907", "indicator--c5d758de-8c16-499e-8388-83a3a5b573bc", "indicator--2a0b7a44-0961-40d3-b126-efe13f7feab0", "indicator--acc15437-180d-433d-be8a-6c46273c4d01", "indicator--ab81b49b-1afa-41d4-9c4b-d8a2d6556683", "indicator--adc10995-e128-495a-89c4-db7861998ee8", "indicator--7f86ea31-f858-4d2f-b28e-1cd718233f3c", "indicator--fc68eb99-fcbd-42b8-8bb0-ed213a68929e", "indicator--79caef3c-05cb-4ef0-bdf4-e6fa1322a7ee", "indicator--3f0e675a-3fc6-4f67-9d62-e6883b64a9c8", "indicator--7e210aea-e40c-4495-9a08-42817edc02bc", "indicator--14e0450b-e63a-4d80-bfca-2d12100ca843", "indicator--1fadc397-0e0a-437d-b09c-d44f8bc7d19d", "indicator--ed51f71f-27d1-43fd-9309-921a5dfe3cc2", "indicator--fca2a9ab-596d-4f01-9b7c-9882aac4b890", "indicator--58d23470-50e7-4a24-9299-8070aa4ead78", "indicator--5c60eef9-e20e-4b18-a942-fb92d921186d", "indicator--1781ce2d-13bf-4e37-adfb-f2119ba70279", "indicator--91be5a0b-d340-4213-88e8-bb29a148feba", "indicator--2fc5dfc3-216d-4d96-a18a-6e3397dc7533", "indicator--16ea917e-df94-4a37-8c4a-090d5f101ad7", "indicator--14b19c1c-54dd-42c1-ab9f-c64ec5a2c099", "indicator--e16a2adf-89f5-4312-b4e9-9a85c58927c4", "indicator--f4165bab-cdd9-48b7-91a9-bfc68597a793", "indicator--5e0e312a-75b3-410f-9022-c628c296df74", "indicator--0925604f-8884-4b40-809f-814b7ba9c192", "indicator--06e08f63-13d7-41b2-b1e3-019434885e4d", "indicator--baeb67fa-2580-47c2-893e-0c70b73b3160", "indicator--48fcca6a-6553-43b0-aeae-1b4b63d90a78", "indicator--2ac87f16-cef5-487f-8075-c397f05a44d9", "indicator--d3ef3a8f-08cf-4d0b-9cfc-ccd4220c9e31", "indicator--9e1404a0-dfa3-4716-a09b-bff1852db9e4", "indicator--52e333d4-c905-4704-8248-04fd69bdd84c", "indicator--fc40ddfd-a45a-46c1-b21e-902cf546a80c", "indicator--a326d2d0-5ab5-42da-9904-402b39344fc0", "indicator--e0660fd3-a764-4d71-9bd3-7a5d87cfc7ed", "indicator--322a559b-1633-4a27-b36a-9410e5e5013a", "indicator--649c5ef9-1139-4091-8b8a-c76ffb74781e", "indicator--436d53d7-3fbd-4af6-a23d-da655a1218d6", "indicator--90c2b316-c85b-4189-9d20-f141c1cfd155", "indicator--96589126-3931-48fc-8439-62b227ae43d6", "indicator--965e2edc-a79b-4f7b-b4ef-7baf12692914", "indicator--4fe83970-cd2e-48d1-81ca-839b47934e03", "indicator--b6dc05cd-1997-4afb-babb-64407f213296", "indicator--b874cb31-b8bb-4d95-b5f7-45ec2920b8ba", "indicator--075b9062-0a6f-48e9-ad71-65172eeb0ad0", "indicator--213c1efa-1601-4bcb-b8d0-a2261345085f", "indicator--13f2a9c2-5f9f-422b-ba9e-ad4afe663c44", "indicator--025264b2-4e50-463e-83c3-9919c0aeea18", "indicator--b7f5b268-0dde-497e-9497-3f8fe79b1956", "indicator--bab4ac31-9789-47d2-a7c4-12cfaecc291d", "indicator--c4554aa8-c2be-4631-b653-4257193b1d5d", "indicator--9c84376c-dc1f-480e-9048-8e3fa068b048", "indicator--7a4eb622-1efc-4131-b066-91ef06dd5a05", "indicator--6c4b1ee6-156e-4071-8513-76cd96ba0364", "indicator--af0cc160-aa48-473f-9f44-f9aa006e5508", "indicator--e5604beb-273f-4252-82de-c0c9d947ffcd", "indicator--beed4a86-9194-4d66-ab13-edeaf04c138a", "indicator--eb476784-35e8-4751-92d2-055138b87e05", "indicator--f30ccf72-7551-49f6-91ef-b95708f278d6", "indicator--2630ecb9-6649-4743-9079-825e6a5fdf18", "indicator--04c48a67-58b1-4308-a21b-30c737eced96", "indicator--eeb157fe-9e66-42a6-98b8-480819dd2412", "indicator--6366e81d-fdca-4e98-8dc4-be9894806898", "indicator--10169b64-6035-4288-9918-f26425e5c5cf", "indicator--c54a3a3c-82eb-47c2-9dcf-bafe1b1ab46e", "indicator--f2e423e6-4b64-4157-8a6b-a7c1fe189ace", "indicator--7338b44c-ce7c-4109-b702-a45654664728", "indicator--c1c2ffe0-dcec-4760-950f-c4e09c6ddc61", "indicator--a5489457-7b58-47c8-be3d-aa8ff83fd542", "indicator--3bbdac08-bab3-43b0-80c0-2569838dcc31", "indicator--ff08b96f-6203-4b4b-90a8-bfd5ee722c20", "indicator--045af438-8f1e-403e-8d34-c9c09b007506", "indicator--1d746cbc-f749-4859-884f-3fb20b7baea1", "indicator--e3c5e61a-7bcb-4f66-8bc4-116139e52f2a", "indicator--8d713be5-033e-43c7-9d47-1917fd84bc7b", "indicator--6c5f9311-42a5-4538-9bf4-07c290cfe1c6", "indicator--f348e325-77cf-4a24-807f-9773e0b063b0", "indicator--2cbb2df4-3f2d-4dc9-8782-a6d6f44c3cba", "relationship--34e53632-3d56-4954-ac36-63384f2bc352", "relationship--16001b6d-f14e-4ff9-8cf8-3de58f964700", "relationship--e543df3b-8ea6-425c-a893-9f387b904866", "relationship--cb9e6bf4-cffb-49cd-bf65-eec56285fb03", "relationship--3865b00c-8400-4ad5-a070-300a84a8d307", "indicator--dcfe0ac3-32fa-4a64-90bb-b34de7c95b7f", "indicator--a58a45e6-401d-48ea-ac33-efbd6fa13d70", "indicator--851b0d4d-6f2a-436c-8670-2fb61410938f", "indicator--8f85d7d9-7cae-433e-bfc8-7ae6004f51f7", "indicator--f5f48899-3f25-4d3f-b9fd-c32dc6292fab", "indicator--a30ed398-4def-495e-89af-bc132cb67018", "indicator--82ca7510-df37-4816-9f45-8e33b875a15c", "indicator--59363da5-dd8d-47aa-b05d-63c063b5717c", "indicator--5dc7eda8-966d-4c19-8826-fcf815a41926", "indicator--4e352eab-45df-4f68-b965-8b4818fab5a5", "indicator--e2fa3f0b-720c-496a-ad84-75a33d160ee9", "indicator--2f6562d7-bd15-4e32-a485-48b237494c5d", "indicator--2ab07373-557b-4771-b890-69729471ca10", "indicator--7281f024-9b02-4dc9-9303-2ad0a5d93a4b", "indicator--896fc94b-bd86-4275-9de0-af3690dc4860", "indicator--5c80442d-9183-417a-9c44-10b5b51bfd0a", "indicator--17ca636c-6ee9-427b-a177-bb0ab2f20bbe", "indicator--bba3f65a-69a6-4ba7-afcf-fe2d241f5a1e", "indicator--a4564a7c-f408-4acf-92e3-d0adf210aad9", "indicator--f715b87f-7ce1-4c87-acc0-ae19651e1675", "indicator--eb4764d2-eda9-4860-bc35-b211cbd8c8c0", "indicator--ce62ce9c-3da3-48bb-8a39-5ad6cf35b17e", "indicator--4cbb366a-3e00-40e2-b52b-19c13a84b63f", "indicator--5909cd30-c885-4a90-9bbf-46a6879f87a2", "indicator--8885b3bb-2997-4582-807d-283f35803505", "indicator--abf91509-8f32-4c05-969d-7cf605517bbb", "indicator--c0cddb8c-4c1f-42f9-a02c-6d865746660b", "indicator--2d11bdae-eaf6-4414-9ab4-f38945c8b0ad", "indicator--0f36112a-ce24-4056-b77b-2538ecc59a3c", "indicator--43322fb5-4cdc-409e-a381-9ea17db1fe57", "indicator--d4faada8-76e3-400c-b463-4c0a0f6422ee", "indicator--0c293e9c-529c-4225-ab06-921d9c97d651", "indicator--9ff37da1-af4e-4eb1-9152-295e41fcc3c9", "indicator--a4a0ad35-90bb-4956-b989-3ddc19e1ca6e", "indicator--aff79277-37c3-44f9-a7c7-5f9bb0b55d09", "indicator--e01943d2-0e1c-424a-bd6e-172cfbe2e935", "indicator--5c0c7c13-5db5-42b8-aaed-aaa166b641c4", "indicator--f55ab6c2-df58-43dd-8708-6854b572e210", "indicator--28eaa0dd-82f4-42c0-b95b-7089d434381e", "indicator--28d018cc-bebd-4d8e-9964-163dc18f5d5b", "indicator--36802b19-70b6-4540-a218-b2fa0b43990d", "indicator--113a80cd-1f44-4c39-bab5-a8bdc8bdbabb", "indicator--3a5e7b58-b1df-424a-8116-d66224c2a3c4", "indicator--03833b88-c969-4c71-8ad8-7347b317005f", "indicator--d7af5a6f-242f-4ddb-86d4-0d18b58909b2", "indicator--50973edc-4c8a-4593-b93d-b76ba84df95c", "indicator--0b3c6c06-5322-44ea-b159-4da7eef2b454", "indicator--71088a19-b42a-48ad-a9bb-06c29293fc18", "indicator--6b869e04-34cb-4a8b-b7d7-01a34d281d29", "indicator--d1db4d7a-67eb-4de9-a6ed-2bbad92ce162", "indicator--85aed9d3-028d-4aed-8b88-16c9cd8bcd9b", "indicator--98a0727f-214d-4eed-b8c9-32f69b1f032c", "indicator--ec7af08c-f881-4aaa-8fd5-965086d33ed3", "indicator--be20ab74-92e5-493f-9604-281c0420dc24", "indicator--596fb6b9-4926-4f10-acc4-203cbdfbeb4b", "indicator--ea9f29e5-6011-4796-9895-763cf2cb1022", "indicator--f0c83b98-a51b-43f8-b188-006aea0b9346", "indicator--4ee512ce-66cb-4fba-bde8-6935e43d4d57", "indicator--af57754d-d074-4bf5-8321-66342b3eb32e", "indicator--74d5cae8-f4ce-4b15-ac62-08a2df565156", "indicator--ae69546e-dad3-45c2-b6f3-4064bd38b0d6", "indicator--92956414-dd0c-44a9-bb03-e48eff4bab16", "indicator--13c53337-6522-4b22-98c7-4e210a872f1d", "indicator--1352984a-07fd-4b44-826e-42c099c9f845", "indicator--054ea79a-6a5a-46bf-867c-737ef97b82ac", "indicator--a7527bfc-0cb6-4ba5-9ffb-bda5f14ee48e", "indicator--5078ba07-b901-4329-98b5-9bd66e6fcc4f", "indicator--8a767d18-57cc-4e16-a195-a2fb279dacc0", "indicator--0be0e8b4-c427-4b0d-978c-e74f5cbb5f32", "indicator--c7f5662c-3048-4760-8580-2c534afdb783", "indicator--9a076d9b-1442-4284-93f9-28499c35189e", "indicator--4ccd3dc6-c6c6-44ef-a11a-2a6783d3618e", "indicator--46960602-41fe-47fb-b56b-a01419866a65", "indicator--64b9df75-3d91-4ba3-b25c-9594b3beb578", "indicator--15133499-2b37-485d-8321-2a6132ed2f6a", "indicator--789e6eea-c333-4348-ae0a-ef552ee19fe9", "indicator--e17fda8e-f182-4df1-8db5-4b4b5f986402", "indicator--6e4eaf20-e719-4681-87d0-a381d59029d6", "indicator--62076692-dbd5-4970-840c-6c255dac573a", "indicator--7f57e9bd-e651-4c10-bbbe-3a96ed0deb5c", "indicator--c69a8606-58a2-4440-8ea2-208a88e133fc", "indicator--c58755d1-d5e1-41ef-9efa-81d67ff00e53", "indicator--2e03e202-aa2f-4f22-a9a0-abad790ffa4e", "indicator--bd3a9763-62de-4a0c-86df-e4dfba6a1504", "indicator--4755f0a0-d05d-40d7-8670-963b2e64d188", "indicator--9c6593d8-fba7-465e-94be-799eb8407bfc", "indicator--2b87ca65-b7e2-43fd-9346-4224bf8b11fb", "indicator--410e77a5-c628-46af-8aba-0ba05fd651fd", "indicator--ce9b8002-b505-4c24-a081-044e214cac03", "indicator--8da5c2b7-d6ee-447a-9e0e-e24b772c4a86", "indicator--50ddf9ba-3bfa-4044-8860-0518fd92baad", "indicator--46f613ec-27c2-422b-b680-ff9ebfc599b1", "indicator--3217dfbf-7b64-4f40-99dc-d8713cd3271a", "indicator--1b81c6a2-2e18-455b-8079-15e92219ad7e", "indicator--52a8d3b7-0186-4a13-afe8-391cd22184a3", "indicator--d289fa7f-7d2d-4956-a45b-479ef2ccca9b", "indicator--6404ef27-881f-4879-8ecd-90fd5e04aebd", "indicator--888d4678-6c48-4535-8753-ecbf2ebb7bc6", "indicator--5dd27844-0e20-4818-91b7-21cb8fe447ba", "indicator--74d845cd-a198-4ba1-a0dc-b88d7c09fef9", "indicator--6f04847a-583b-4f5c-a9cc-8082e2c72070", "indicator--77021b2b-1498-4a7e-aef3-b5c2f63fccf0", "indicator--201d012e-85ab-4e23-8009-e5aa2e0fd0c3", "indicator--887957df-118e-4b44-986f-a0033e068d07", "indicator--363642c8-f722-44a1-a813-1f9f4582565b", "indicator--0e2a48e5-2af8-4d9a-94da-b7d5ff63dd8b", "indicator--22d92ac9-22df-49ad-a461-956f1741fd3c", "indicator--2634c96e-18c7-4f9c-95b3-6b10d9ad2441", "indicator--66d8c60c-66bc-4717-a9f7-d8467d5469d5", "indicator--aa7d40a1-a572-4fe8-93e2-1f0508dde634", "indicator--7015038d-0443-4811-b235-05d5a0cd0222", "indicator--d25f1cc8-a46c-4594-8845-5b429a4abbf1", "indicator--abe1c656-72b4-4324-be1b-1ec054a6f58b", "indicator--df90ac54-f6d0-45a9-b293-4e09ec9fc70b", "indicator--1169ab32-e7bf-4d84-8a47-9bccb7fcf88f", "indicator--bf88eb1b-febf-4c8b-a3c4-7da69ae1f6f9", "indicator--27bd60ac-65fc-4c2d-a292-d954705eafd1", "indicator--b0309ec1-5d5f-439e-a91f-e13d299c8516", "indicator--acd77194-8f0c-4205-8541-100d6ca57c88", "indicator--763a0557-d067-40bd-a042-d1602f3a045c", "indicator--9906b623-6c48-4c02-89ec-dc4d98b17981", "indicator--e8bc4211-09cf-4302-a36b-9df90242cbb4", "indicator--aa544c78-f922-4c2c-bfef-178aaf2ff7d6", "indicator--adebfdb2-43ce-40ac-b436-d7536957cba2", "indicator--ca0d98e1-8030-4f07-b576-acc985dd5a88", "indicator--318e29c5-e6d6-428c-87aa-e42cfb11a537", "indicator--b390e890-6cef-447d-8271-4c6dc9d6b3bd", "indicator--3617a785-0450-41b4-8ab6-cf33bba01cac", "indicator--409276b3-c507-40b8-a7be-e1fa451eee52", "indicator--7de33a9d-8a58-40f6-8719-ea2d65084457", "indicator--5891ee22-325d-44b7-8b07-aaaf1a10e7c6", "indicator--a864780a-c0ad-4660-b23d-e39e9d2ce52c", "indicator--1c0ac000-afe2-4de6-a07d-4720760bfee6", "indicator--2aa281dc-b69b-4d69-b3d5-6f353b775b78", "indicator--1548a2d6-4766-43a5-8b51-cf69bb3a1532", "indicator--66945ddd-cb3b-4951-9091-ec7b0c610bdf", "indicator--176365fd-9856-49b4-a64f-ceea9f9cced7", "indicator--572164a4-7385-45c8-8965-216064a93072", "indicator--fc4c6af9-40aa-47d4-9369-46f341385dd9", "indicator--09120614-8b41-4984-bfc9-35afaac04ba1", "indicator--30565f69-8c3a-436f-8b57-4b23c50bbbbb", "indicator--d93f44f8-7f51-4ec2-8ac0-978ccc654f33", "indicator--adfbd400-264b-42c1-adbd-7fd3a3a8af1c", "relationship--ef0cd424-1e99-4c3a-957e-7ef0607afb82", "relationship--ceac51e3-5c72-4d06-a712-0d729ba84e93", "indicator--77a3058e-37a8-4171-a608-79d6c85e617e", "indicator--65d6931c-ea4a-440b-8f36-89b9259bdffd", "indicator--98ff0d48-c976-4a86-b239-3bf400fca66c", "indicator--eaf9e049-57ad-4cab-b548-340e656d4647", "indicator--44ca6867-7b9f-4019-ad9f-84cecf5c0682", "indicator--d0b390ba-a700-42af-9e3a-dc7f2dacafb4", "indicator--62b7473e-94b2-4862-8aca-0e109c8241ae", "indicator--3c1a6a40-232d-4a9e-ae24-d5b7775c7e71", "indicator--b82ccd75-c903-4a7e-9435-0c83b368d52f", "indicator--4b0f4340-3f91-4bf7-8c92-bba15140f546", "indicator--4cef5057-53ee-49a9-991b-ab169c68c97c", "indicator--a3368e7a-3a0b-4dee-9d87-a4d845aea1f3", "indicator--56918c3b-c5c8-455e-9e91-7c41732b80b9", "indicator--998c13a0-d9ee-41bd-bc7d-af269373d3fd", "indicator--cdcd1050-94c7-40ca-8f6f-ed7b4db0e202", "indicator--78d94fb7-487a-4205-adbb-a3ee8269c07e", "indicator--cb64e1f8-f3f1-4283-911c-2a83f443958e", "indicator--842a5d0c-4300-442b-9115-47a9fc0d7f9b", "indicator--4918d8bf-73be-41e7-a24c-db5d85625165", "indicator--376c2287-72f0-4683-96b5-6532ac93aeb2", "indicator--c45fddb7-28df-43c9-9ff4-036bf6c2372f", "indicator--c2b675fd-ec4c-4c9e-81d1-f3b90b1b023d", "indicator--ffcd72db-009c-4d1d-83d2-7709af8806cf", "indicator--83a03f7c-73a6-4a7f-9f19-fc64ad99ded6", "indicator--e5b22f18-8e3c-4cfd-ae17-52329a60bd60", "indicator--f3bfb412-a9af-4044-92f8-8a282f39ce9b", "indicator--64541f36-5eab-4b68-a348-654b8d78814f", "indicator--2863a7f3-a674-496b-8ab5-b8717e10e7a5", "indicator--c46ccc1b-2411-4f48-8852-eb6ebaa4d2c0", "indicator--388f9118-0aa2-452f-a4d9-df2e011639c7", "indicator--652fd6da-1828-40d1-9e4d-a2b2e65101ec", "indicator--bedfd431-f8a0-4177-aa8b-52841f2ed44d", "indicator--0735933d-79b1-4423-9ed0-4d747486d1f4", "indicator--720c8d82-db5a-48b5-979f-8790ab93b76b", "indicator--f1748560-64d0-47d0-8ce8-197fb9c01d8f", "indicator--0fe6568e-0f18-4827-b2d1-c054c7fcc10d", "indicator--99bce1d9-c9af-42a5-b7b5-149b82a875cd", "indicator--094a7902-5491-4a59-864d-fbe0c5f8d67a", "indicator--a1ca51bc-67cc-48fb-b55e-f9bbb2bd6a32", "indicator--c5bfb71a-58c8-4dbf-a4b6-da0872c65757", "indicator--fa232b76-60d4-469c-8264-e71ae215c7f5", "indicator--61afc7b0-b8b3-447c-bde0-1314131135d8", "indicator--863ea186-3100-4acd-8ebf-a6e5a2ba7e4b", "indicator--05d904cf-e57a-4de8-97fe-84523ade8456", "indicator--e02bb174-b824-4e34-9ebd-da66a134ad95", "relationship--db515c72-458d-41cc-b728-41657fedb5c0", "indicator--0dbc4425-b716-49cc-a6d2-0f6797a410ad", "indicator--8c70d6be-0f83-4959-82ce-e06894c37d6c", "indicator--f58dd6b7-51c3-450f-8661-73fdba897897", "indicator--e5117c58-1427-4c95-9796-65a55dd3a7a7", "indicator--f75c8c20-2a5f-4a39-b0f5-ff0883bfebe9", "indicator--928422eb-29e8-4606-ac3e-e2ed24157f0d", "indicator--ed42b2e7-15c8-489a-b9b8-091897d4fd81", "indicator--6ad449eb-b8aa-498d-9a38-893e86528ec7", "indicator--2125cdd3-b427-40e5-afcf-d77e1a74d4a2", "indicator--74c70521-c34e-4131-8e09-3ff9166f9971", "indicator--88401014-cdf4-43db-a260-c58f0b568a69", "indicator--6a2386a6-b099-4e82-99f0-efc29c01a3c9", "indicator--eb93e7fe-2f39-426b-b666-c02b6a8f6da3", "indicator--127117a7-4ec4-4b76-befa-afe2daa871b5", "indicator--3e6f1ed8-9966-4461-840d-b5326df4ec2e", "indicator--0fc85d9f-756c-4b1e-8520-6a70a480fb21", "indicator--261ff9fd-e19b-43db-ad50-f866cb80723a", "indicator--b234bff1-4cf2-47eb-bd9f-a130b4ecca44", "indicator--3f1e72a2-3b3a-43ce-8843-0819dafcb6f3", "indicator--4dc795e3-0912-4410-b45c-b3206227ce70", "indicator--6b8bd557-b86c-4b81-9204-42842538968b", "indicator--c535a69a-7722-468c-916e-ef9c70d2e495", "indicator--1d668040-1b09-4797-8f19-4e890aefb5fe", "relationship--48ddfe71-0403-4225-aded-7de0a1225218", "relationship--215ab1ac-9fcc-45d9-958a-ddcbc64da7d6", "relationship--bb6292c5-a36b-4361-8520-8fd5ec8c20ae", "relationship--37f2117d-5e19-4357-a495-1ea4929cfde9", "indicator--5a0d5a3a-0f3a-4030-88b4-c444cae7d634", "indicator--d08c697f-23e8-4a75-9c3e-a5d964f9cea0", "indicator--389d1aed-01dc-44c4-99a0-96e9a6f6e021", "indicator--040a7ec8-4910-4f9b-b91e-e1c05fa7d632", "indicator--42e6e465-b9ac-45fd-a17d-84542c060134", "indicator--de7538d4-ca4f-44a8-8e05-0c34e0a48514", "indicator--f0af194e-8518-4cc3-a564-9e597e91a1cb", "indicator--88599aa2-70a1-4de5-969c-ca6fd72cf6f1", "indicator--1ef1a702-5b1d-42c8-bce8-966be9fb67d6", "indicator--f6a25472-7d68-4f9f-8411-e131fbe1c541", "indicator--5719407b-4fe0-4442-8e03-6e13866f13e5", "indicator--25ff54c9-a6fb-4a52-9672-1ae51b46f9ae", "indicator--c041999a-29a0-4b51-bad3-8ec7db9b9440", "indicator--42d7babf-411e-47a2-b437-1762d9598adf", "indicator--3885bf4b-6048-40b5-ba09-df395ff819db", "indicator--9dab1284-8470-4b93-b6c4-983e5c87b205", "indicator--21a40978-2df9-4daa-a6d7-15e26e768c4b", "indicator--793ec5bf-1be5-4a6d-abe0-230f2aab87a9", "indicator--75f264e4-c514-4c9f-a4e8-ff83863b0084", "indicator--465bf3c5-bac1-4154-b761-fc66031dbf0a", "indicator--193e09c3-ee6f-4f29-b785-035f46374021", "indicator--f645c76e-e353-45fa-990d-3856ce8621f3", "indicator--1f30b803-82e4-44ea-9b96-ddc96ffaa649", "indicator--093bfc9f-6ff1-496b-b81c-d737a696a712", "indicator--48516f06-678d-4d0b-8ef3-7c28bef13988", "indicator--b4026fd1-53e5-44ea-ae7d-37a44d9a85d6", "indicator--3679c294-2443-4f11-b3d6-55ac5dad9f96", "indicator--20ddc91e-cd80-4473-9e20-b6c7d6076868", "indicator--e3c130ea-e654-4c20-8c34-50c704329447", "indicator--c1a0f8a2-3982-473f-beee-2e637388a86a", "indicator--3de46071-6cc5-4660-8018-26dc89c71001", "indicator--dbbb1a15-abe2-42a4-ba3b-fa7b4ef6424b", "indicator--7be7c5f5-590a-472b-bed9-e81621563c65", "indicator--3bf8e9ee-14fa-42d2-817c-3e72c92bc243", "indicator--42c7f880-fe26-4e56-bd3d-be47fb3f82c6", "indicator--4da07aee-22c8-4c1f-8f30-73f22038bd85", "indicator--ba3b45a8-1b72-4a59-8789-42d7db3a9cb2", "indicator--72600b40-83bf-478c-9842-47d9870bcf7b", "indicator--58bb9be4-8544-417f-9cf4-131ffb45d824", "indicator--d0ccd1ea-6cb2-4a25-bd92-41f097206d4a", "indicator--8f02c294-66b4-4b57-b409-032d9c1978ae", "indicator--688a4b60-b33f-45b0-a234-163191e0a6ba", "indicator--34152062-a6ba-4536-a54a-770af15a5b4f", "indicator--473fc3cd-761e-4fc7-ba56-b24905da2679", "indicator--25584c28-8d94-40a4-945c-7301be8ebf84", "indicator--2db703b3-1325-4f4d-973c-caaee6068685", "indicator--5d36c892-e215-4b15-9e01-8adb12fd9c58", "indicator--30362728-985c-4b1f-b860-7fc7e8d41a28", "indicator--b17e8eac-e2ed-496d-8020-d17114b8d34d", "indicator--696bd9ca-4b9b-4509-a01d-1dc0a0316e13", "indicator--95b58a0f-12e6-4488-b376-33480e376200", "indicator--9871f586-67e3-4fc9-96bf-3cb4e92b8766", "indicator--0145af0e-40c9-42fe-81bb-740b61ab3787", "indicator--f46a15cb-c978-4902-89ad-835de4f6a387", "indicator--3af768e9-00e1-4a5f-be75-2ac9aa528dc7", "indicator--08e4a3c9-3b0c-41ae-9576-0121c020813b", "indicator--6282ee32-6721-4a2b-a97e-404449096cac", "indicator--6d6216ec-7552-4525-aa02-03ee7f2ffe77", "indicator--16298568-d666-43bf-8d1c-a6ed8513a6a9", "indicator--af80a7d4-6132-4e91-950f-8f4cba1c2390", "indicator--1c5f2d9a-7c1f-40eb-9680-3d2387e53dcc", "indicator--94213e3a-9d1d-442e-af92-1f5352df75c5", "indicator--46680866-b0d3-49e6-ac59-4672f87e8f1a", "indicator--061cdcd2-291a-4f72-8c37-4461f0df73e0", "indicator--90790198-a214-4fb3-81b1-a08e2989c55c", "indicator--f87d1597-82e8-4f04-adf0-fdc2b41034d6", "indicator--cdbd6e43-0f22-454e-b395-7c3210593137", "indicator--e641757c-be28-45bc-9aa5-32ab3717cfaf", "indicator--3b1ec62e-2c57-4d81-b55c-ef85082c8792", "relationship--cc2125ee-3e43-4529-a1bf-29eaa4f92e8e", "relationship--b3c20ba8-02f0-4035-9125-16daa5d47087", "relationship--64979c75-b3d5-4640-84de-9f4f619c1a86", "relationship--dbf731c5-8859-4051-8809-1bf54dd9525c", "relationship--3f30431c-34b2-472e-b34e-65376d592ae1", "indicator--9db8518a-1507-4771-a9c9-7db83fd1f12c", "indicator--e253c507-200c-4958-8c79-a47074b7b9ec", "indicator--39f35066-4374-48f2-91d5-c8aa8f95cd27", "indicator--ccda52fe-5817-45b6-b935-0ac3dde09757", "indicator--465d5b28-2938-4bbc-bd70-ac6734aa5276", "indicator--88f7473d-5f11-4220-9a62-2f597dfbc474", "indicator--ed5eb0a6-53c9-4473-bd55-8fae74eaf421", "indicator--78f554a6-0b12-43bf-baa2-f2f29e027655", "indicator--19bf143e-dd7b-49fd-9654-05d7184e0a32", "relationship--8f77f60c-1f30-4ca0-bd31-aac43f57613c", "relationship--dbbf7921-7a37-490d-9538-507d8a68f2d1", "relationship--c46130f3-5571-4828-96c8-f02c4ff267bf", "relationship--5bdd13e6-e6f3-4c7d-b2d1-326856c65de0", "indicator--d41e3958-a8b8-4220-8ebe-cd73a16c3162", "indicator--f39c4209-ca18-4f62-b99e-b4cee5a31535", "indicator--9a99ab6a-5bef-452e-abe3-d7bb7570fe63", "indicator--6068d534-1a5c-4890-9440-a10f8be1566d", "indicator--d2d63e12-9a80-472d-9aa0-76863089f664", "indicator--6a2aac27-5209-4c4e-82e3-1c7826b826e1", "indicator--06a36902-e4a5-4754-afbf-7775408256d2", "indicator--b0e9979c-ec42-4d75-8130-06feeeb6cb3b", "indicator--50066d47-a8a8-47b2-b63e-e9d77e4dc93a", "indicator--7a60eba2-5f8e-4b4c-a2ad-cdd37191d58e", "indicator--d05dcadf-4696-4f96-bcd9-cbf4f6eaf6aa", "indicator--a14fc698-cd1c-4b1f-9aa3-6fb1c355044c", "indicator--80cf8a6b-07d3-4fd6-9072-ec5ee4e97059", "indicator--8dd920c4-34e9-4a00-8b99-80568678afb3", "indicator--5f3d5393-425c-422b-89ab-53208be8f160", "indicator--5409e8e6-7dc3-4ba8-abbe-013b522346ea", "indicator--90a58685-67db-436e-9600-c3923b836b8d", "indicator--0812403b-403b-4ee1-9ddb-5757c16ed2b7", "indicator--7f903780-b9f5-455f-858e-e060f5a59f01", "indicator--58d45de8-ec4b-490e-8768-5d067ff33cd0", "indicator--99fa354f-bfca-4641-a2c1-3c98e2e2a9a5", "indicator--8d0bab9a-a4b3-4f7b-9515-8a0df9e1b251", "indicator--8b0521d9-74f9-42b4-b507-2688315cc883", "indicator--75cd8966-1195-4425-bced-92e7de9ef6db", "indicator--bafcf287-5b20-4742-885f-e8dc85f896bb", "indicator--bc6d0ef4-087a-40ac-90b9-6f84da368527", "indicator--9bd7036f-4177-48ed-9f4a-8be990b6abb5", "indicator--ce591350-38d6-4bd9-9309-f6e6f4d8490c", "indicator--ba658488-afb1-47e5-853a-a36671d6a004", "indicator--5d845a49-3996-4b23-bf93-c0f5d12b4556", "indicator--5dda94e7-c57f-4cf9-8d4a-dd68d6524be9", "indicator--850d9f2e-c4f7-4549-b395-ffa1db8a3260", "indicator--821117b3-51ab-4eb7-98d8-920f1c9ed24b", "indicator--6ae3f0cd-cc38-48e0-8a96-1b047ebe074e", "indicator--70d9432d-340b-4940-b68e-12b4d0a77804", "indicator--3d01c397-bce4-4f6b-b278-5a5d65f983d7", "indicator--426e6d45-33d4-475e-9f6a-459de2363bcd", "indicator--466c132e-7953-4609-beaf-36a3e50f9ec9", "indicator--620f99c1-b9f3-4e0d-a1dd-94290a97db73", "indicator--4bf5d562-8682-4fb7-a673-eb7abeed7604", "indicator--2aa28fc0-1f10-427d-a5df-7dd0a7a27768", "indicator--05294dc9-ee82-4c35-b97d-de21669191af", "indicator--92116e53-343b-4ba9-8e1f-7ed84d92c4b3", "indicator--8a73704f-2138-49d4-b373-9cd18ee67b7c", "indicator--46722572-947c-4230-b155-1c0657c4bde9", "indicator--36171284-1733-4107-82fc-160c86ffcb55", "indicator--8ba3fc7f-10d4-4f17-98ee-f0079c65c9d7", "indicator--f7c29cd8-5e99-4a77-80b9-91c037509d8f", "indicator--9a0b7ab0-3182-4a14-9885-e76c592517fd", "indicator--d7c3fd7e-b450-4210-b24a-76c98e6f1d86", "indicator--7e83de8f-2734-41a9-89ee-e389a533635c", "indicator--8be6e9b6-1757-4f44-93ce-72c9f934cd92", "indicator--c37cef79-4a12-439f-9aae-3262f40bf1a7", "indicator--74c45903-4190-4bef-a1d7-4bc795946a12", "indicator--ee157f07-39d5-4697-a2c0-80090153675f", "indicator--046c98f6-b722-4b36-a241-09698c442c78", "indicator--a5bb1ab4-4de8-48aa-88ff-e2a2d9314998", "indicator--a18779a7-1d33-4331-a7dc-c7a87bb60040", "indicator--8151c2c9-3663-42ad-9041-abed9da31083", "indicator--a6991dab-4e4b-4ef9-85b9-5e83107be93f", "indicator--49db3970-164d-4760-99e2-35bbaf5da76a", "indicator--54fcac9a-8d82-4cb9-80cc-8542b27a1e72", "indicator--317ba51a-b770-4f10-9cc6-91db82a1d6ce", "indicator--de8e7abe-d8d5-40e5-bff9-3379f32ecbf3", "indicator--fc318c47-e5e2-4c99-afaf-6e301ab6d932", "indicator--f475cb2e-dc4b-4079-84f5-b558ea2d53dc", "indicator--521b5665-86ab-4be1-8b3a-597508288a88", "indicator--e4ca6448-e853-4649-90b1-4c30f029a6cd", "indicator--f009229d-756e-4f49-a1e4-dbf34e490493", "indicator--cefbd28d-a58d-4e0c-bdad-3300cf5eab5a", "indicator--27df2c18-3af7-4c1b-9b7b-1f5bdbfd7d21", "indicator--9f407413-ee5b-4671-9def-9ae1a8211f3e", "indicator--49795156-bbbb-436b-98a0-5e1ffe0d2541", "indicator--46d8b260-fbd5-444d-8d2c-0e5f55c8e712", "indicator--3fd5a726-8544-4ea9-ae6f-06e5ead55e12", "indicator--ab1dbb57-abb7-4cf8-91e3-49ebeb077ea4", "indicator--c2a1c034-0863-4ef1-a64a-aa6076b9438f", "indicator--0c587945-823e-4d67-9491-3282d462e6dc", "indicator--8a5509dc-81d8-49bb-9b80-4fa452159a2b", "indicator--8c40f0ca-7aee-4e08-a146-d3f0cf5ae801", "indicator--95cd93c6-4e51-40fe-93c5-dd0ee1586b98", "indicator--eecb054f-cbcf-4879-bc88-ed00bd65ea6b", "indicator--ffbaf16b-7832-487c-a5d3-c4f5431215a1", "indicator--6595597e-0df1-49d0-8bb7-4fabc6d68290", "indicator--fafa4773-cc61-4566-921f-285430982f8b", "indicator--9eebe5ee-f642-4530-a2bf-9f75700d8154", "indicator--f0b043f9-8452-47bd-ac26-5891589e2bc9", "indicator--db1a71cf-84c8-42f3-8210-6dcfd6409193", "indicator--28522a1c-9b00-4b84-9bea-71ad78a616fa", "indicator--64971fbb-0e66-4027-8b35-c7a55267f16e", "indicator--ae1d57e0-507c-470b-a9aa-37f0b5d2c026", "indicator--920c6397-f715-469a-b16c-6a844bb1bf8f", "indicator--9ce80dac-d690-4c22-979f-17d4fe285260", "indicator--a045a565-b8a4-44db-9fe6-bd0d8df4cd6b", "indicator--ce31b161-c229-4d4f-9c93-4633b6f34926", "indicator--07741739-2e17-4eee-94ab-34ba647e5b31", "indicator--a450aa5c-42c6-4159-b7fe-d546ed2f7c07", "indicator--c6da2d29-4ab6-4e1e-9e2b-64adb9737630", "indicator--3c4c1620-9a37-4f9b-8020-817fcd6f70c6", "indicator--0f32df8e-17fe-4526-b8b1-02ff4238e2e2", "indicator--2e7089b4-3099-4eaf-9368-297dc3b24e26", "indicator--06219064-5737-472b-b772-c9fb32f3c28d", "indicator--7ffddaee-fdf6-4cdc-9ffc-e440cc9926ab", "indicator--1a15c8df-c6a9-44de-83a5-ffdec7a12aeb", "indicator--2a5f8055-86b3-4fc7-a12a-ad14f0ce1cdf", "indicator--51492423-d062-4bcd-8ecc-c346a3fc5efa", "indicator--ca0eeaa7-84b2-449f-8491-bf4187ef75a8", "indicator--72dbdeb2-bd4d-40c4-8189-245f953cb2dd", "indicator--9c1f1ad8-52b3-4200-b9e1-8764694171a5", "indicator--7ef17259-f47c-4398-84f9-aabb4979fd5d", "indicator--8400a626-4494-438a-b8f9-01eff7dac44e", "indicator--675ebc54-904f-4793-948b-a5011e48f916", "indicator--505c5c5c-3bcb-4edf-a6a6-1851a7e4817d", "indicator--9762f1bc-3d6c-49c3-8fb5-24b855639c40", "indicator--15f4c477-ccb8-494d-b24b-06ef5d4a4b08", "indicator--b6a9e10a-6cb6-4723-b541-4a36ee26812e", "indicator--031fbe91-a0ca-4654-8cab-69d72dc42854", "indicator--80d2a506-52e3-4c7d-925b-570c449963c7", "indicator--b5593255-dc16-43c8-aa2c-165b4cf4bd53", "indicator--ca2e11c2-ac3b-4969-8e90-a83105a18efc", "indicator--6500f428-6baa-41b9-8c58-5fda37603189", "indicator--071c3dd1-c1be-4f6b-a315-c23ab071c0b8", "indicator--9ac41293-9a8a-41fd-8ba4-519b2d57ab90", "indicator--cdfa80cf-1f57-463e-84ee-7db1c54afc5b", "indicator--58433316-def5-4f8b-a3bc-af9eb8ca5678", "indicator--58517797-818b-412a-8cce-28b3c256c2e1", "indicator--9d45905f-e069-4f08-a5df-bef7e8d40d58", "indicator--ad21c94d-a672-4d76-af3d-9e8719adfaac", "indicator--b16d968c-7866-4065-819d-f7bac0734180", "indicator--79966682-8f55-4c23-93b3-85fc614cec97", "indicator--9768be44-c382-4829-abb9-c52b484c37d8", "indicator--34eeb374-16d9-4b97-885c-6105c9c87762", "indicator--d530bc3b-2bb4-4797-9cd3-efeb668bd9fb", "indicator--c27a5c04-a66b-4255-9d82-efb7aeeba272", "indicator--1548dc27-14d0-4824-bb57-af139facc745", "indicator--989109b9-e491-4984-8b39-0626cce7cfbb", "indicator--c44b10e3-48c1-4a23-84c9-acc789688da4", "indicator--49b845b5-897f-48b1-89ef-6694d815a837", "indicator--53e7f5b0-7c4f-450e-9404-c98edc804a7b", "indicator--6b3e54da-91c0-4f12-925e-ba7d480f9e28", "indicator--9e4468c9-b39f-4bb3-b5e4-12f2965b8bad", "indicator--10518ab7-d6b5-4152-ab6e-7a23705b054e", "indicator--8fd46c2e-6971-417e-a414-a2a7b269a425", "indicator--876c854b-3fb3-4513-80b9-4326ba51cd4f", "indicator--016e6976-ad8c-455b-8357-a6abc02389f7", "indicator--c781d41f-d1cc-4e3c-b672-7141ba7a796a", "indicator--35dc4e64-0f60-42bf-b107-ae4c6147295b", "indicator--b62af15b-cfff-4209-87f6-fc98b3730a91", "indicator--6bfd6365-c582-4c08-8a53-bc64dc7b708c", "indicator--6c475386-4e2b-45a9-95bb-5a7402bb7a25", "indicator--26632dc3-c117-4471-af24-3b2fcf0d4bf5", "indicator--f01c3cf0-21a2-445b-983a-84fa38cff2d7", "indicator--55640682-0040-4ca6-bd0a-0b12dee60566", "indicator--0e8c3de8-add4-4736-bbdc-9130238bca69", "indicator--ff3a7455-bbb2-43fb-ae4d-ef372f9b27b0", "indicator--f2fe9290-cbfa-433d-84b9-b1b99420196a", "indicator--e03a1aa4-54e4-4899-8498-be3d86bebe9f", "indicator--c324e0cc-1863-4d37-bfa1-82e5af98e7e4", "indicator--7e50f503-6069-4785-a8e7-f5d80a4ad256", "indicator--8d4acd7b-035c-4e52-8616-dd8b1bf22f75", "indicator--e17dd748-c604-4821-88cc-5802c2226dd0", "indicator--3095baff-52ab-4105-808a-dfb121b7ee31", "indicator--b1d2cc98-a2c8-4591-aa91-b33623ea1931", "indicator--3500c518-1cd0-4d4c-a6e2-98c406b6b957", "indicator--28a8d641-4b83-4404-953e-5318b8c87427", "indicator--8b019104-c0ca-478c-8fcf-01a0177b3970", "indicator--93c532be-b107-4c99-ab62-a24a276de39b", "indicator--c5ca5d50-87ff-4e8c-93a0-5f39d66ede7b", "indicator--b9b2d870-e456-4e6f-9434-85262ee665be", "indicator--48fbebad-509f-43a1-af8f-992aa74ba637", "indicator--36fcfeb2-bcc3-4759-b28d-82afd6095eec", "indicator--65d48887-01f2-4a1e-b6a8-f68c0131c5ae", "indicator--9825c5eb-50f2-4415-a835-33a60fb25dd7", "indicator--86a63e1b-f46c-4289-a627-4a18ab0ba109", "indicator--e8037666-7b6a-45b5-a2c3-71e04167255a", "indicator--91e1d0c2-ccfb-45ce-bc7c-a09942f809c3", "indicator--f5711b6d-be64-46e3-8c39-dbb5da82f8e2", "indicator--359706db-9fd9-4300-ac7f-fbe864edf695", "indicator--506d2636-9958-4d56-b0c2-35c37641f8cd", "indicator--cb60205c-b856-475f-9ab6-642fb35f337d", "indicator--cab4436e-02ec-4c22-b18e-9deab81d2f2e", "indicator--e109b117-e4c0-40cd-9e29-00d0c07ddf12", "indicator--52aedb60-dd27-40a5-b393-7ec730e47077", "indicator--2d1f2b18-d492-43ba-b35d-4ba2aa831708", "indicator--8144e885-5be0-47cb-ae44-57113ada3d73", "indicator--8f941d1c-9b9d-4572-ad13-bd6be75118f4", "indicator--0b122dd2-e9d4-49db-921f-a67637b09653", "indicator--9b7d6e99-365c-42ef-8c59-0c2ee95a4604", "indicator--ba8d7e70-8d89-4b61-9f11-153f49535383", "indicator--894ae91b-4522-4cfc-b517-395e6bab5bd5", "indicator--4f13be84-166e-4583-8329-a920b4bde1f3", "indicator--3d0631ab-8c84-49d8-85da-281b5ddd36d3", "indicator--66d30fb4-0032-481a-88e7-c1fb6e1e9e30", "indicator--d51c0cf1-34df-4f47-a54b-9e3c12983455", "indicator--771b4c59-459b-4d95-a079-ec20fe2f878b", "indicator--8b6fef60-4009-4a93-bc2c-849a0c4d1255", "indicator--add7e7cb-19e2-4e91-86ea-e32054446c58", "indicator--3c98dde1-becd-4ba9-b333-58ae40f40be9", "indicator--2a3e8331-7bda-4c72-86c6-547b9d4656a6", "indicator--509f96c5-4c85-47da-9440-5b94b1b3649b", "indicator--a27a3bc0-deda-40c8-b592-6b63e7aedfca", "indicator--544d975a-2876-4373-a11a-4b5b996a5419", "indicator--4c7b4b02-e27d-4927-9a36-b74ccb6cf23d", "indicator--958f2ea8-d9b0-4055-bb02-d95488fcfb01", "indicator--f02044a2-71d0-4469-b0eb-c48bd235e08d", "indicator--ef1c428f-69b4-47e1-84e7-e58d9d0e474e", "indicator--da3ae095-86b4-4c5e-9c9d-6528f0976e1a", "indicator--5b9c5fe8-381a-431a-b38e-d2366f8af3e0", "indicator--9a33406f-d22b-4c50-bd5e-a56b35a22c9b", "indicator--6c123e26-7214-4488-a58f-a6c5ef067a7a", "indicator--f59ca5a2-d10b-4389-b881-03b0f1230785", "indicator--ac177629-4d6b-424d-b50a-c81f932c2b4b", "indicator--f3f5b3a4-49a5-43b1-a2e0-753923f41627", "indicator--3bfcb916-fc2c-44e9-97af-a07295b99aa9", "indicator--30184d6c-9735-4bfc-9331-a0af8b36b257", "indicator--dde24ca5-8acf-43bc-8213-d5ac898361ed", "indicator--c6dbeb34-1359-48ff-b01d-5611d6f77dfb", "indicator--de173840-cb48-4207-8e87-3333b72afa5a", "indicator--e5cbc607-3907-4295-a7b7-bb300e44b944", "indicator--6f0d2f73-518d-41fb-9c03-1f5b33bc9cb1", "indicator--0e5b348e-6c91-4032-904d-8a4f956bd097", "indicator--63acf74e-cbdd-4926-b4ef-d257494e6dae", "indicator--7d824d9b-9a58-46be-ab25-608fcf82e086", "indicator--5fe5bb67-133f-459c-8682-18b91f933123", "indicator--338ad3c2-153b-479f-b762-d13ecd009d22", "indicator--337fc8f0-203f-4a8f-90ef-ada00bfc7ed6", "indicator--0ad2265d-65d0-43f9-9bce-ecc5c4bed1e1", "indicator--3f88c281-dd15-42a2-a35d-5d1de1d50069", "indicator--b82320ba-c9f8-413f-8ceb-1506f44dfc50", "indicator--7e9a3f7c-048f-4595-8e6d-f2fd7c0d07a0", "indicator--babcfa4a-a968-4612-b269-c49cd8839a26", "indicator--ff66e167-dbd9-42a0-aa42-d65736417b51", "relationship--6d78a749-072a-43ab-a35f-98b954971f3e", "relationship--36ab147f-9594-413a-afc4-803a14f23577", "relationship--00bfe29c-a7db-415f-95ff-c5b7404ba2b2", "relationship--bb21e6b7-279f-407f-9189-bbf1e4c934e4", "relationship--4c277804-742e-48c4-96d5-6655b219935c", "relationship--a06a3856-8e26-499e-a0a0-75589d674917", "indicator--79b0a74f-83a4-4a6a-8cf1-dbc06d73909b", "indicator--c8080eba-c086-472c-90a0-63e2af89bec0", "indicator--2879a7f6-f5ec-4626-8bd8-5241125c7596", "indicator--099dfa13-a5aa-4060-b86b-49e5cb7113d7", "indicator--944d9c95-aef1-4b4d-9878-b21824ae82a0", "indicator--2775e3c3-af7e-47c0-ac45-2287b8a199c4", "indicator--bb38bcdd-81fa-4988-b589-b3fdf0033d58", "indicator--198daca6-0897-41a8-99f8-3a58c5bc53e6", "indicator--b1e32c19-e7c6-4512-a1b9-9e5c9c90cbc4", "indicator--35a9f76b-487c-4fb0-ac06-ef8b7a3b0b3e", "indicator--1ecc94d9-3424-4828-b74b-eca192595339", "indicator--6c1f7778-fd3e-4578-852e-337df7343e25", "indicator--50528be8-a612-40c5-83ad-2656c1fe8b81", "indicator--4a7055ab-1630-4f4a-b153-acab7f1aeabd", "indicator--fc87f557-0fef-42bf-af44-b386315c96d6", "indicator--576ffa65-5970-4de0-a3a5-d7b1e3a89ef9", "indicator--c063e843-c5a0-4534-880b-ce4bb3544d8c", "indicator--1ded5d64-1363-4577-86a2-c5ffdd9f5348", "indicator--d54e8736-854f-495a-9a47-9ba053fa0741", "indicator--e798939c-5c82-4b55-b056-308005c1bbdf", "indicator--86dc4983-e0df-4618-ad8d-ad870a0acb5b", "indicator--7239dbfa-19b5-42d5-9827-3cecf4a1a21a", "indicator--bf18cf4e-5afd-412e-a1c2-671032221e2c", "indicator--598e7db9-9833-441d-b9b5-9c0feb435947", "indicator--87a88dac-707d-4a99-aa41-9771db30df56", "indicator--5d51e7bb-4a53-443e-b368-2d644d058d5b", "indicator--5e4ba018-0742-46c2-b121-cea3feab40e7", "indicator--20fe95d8-01b0-4a35-be39-b4d60bd31877", "indicator--9b1182dd-5b23-41e7-ae04-9ab10d349521", "indicator--cd06ca85-284b-4f28-9db0-2470c9d90d60", "indicator--d378783c-49ce-411b-aec1-2f6fae7d038c", "indicator--bd70d687-0676-4946-b716-643ffe4aa160", "indicator--081ec4d0-1618-4ea7-855e-ec5439c136ba", "indicator--f71dc9b5-2674-4881-9edd-2cdab3aa93e3", "indicator--c80364d7-3fed-469a-af4a-91d8994591aa", "indicator--9a4f3fc7-99e7-48f2-83fd-0726f057c86f", "indicator--952cb913-4c34-4c36-badb-31ddbc068ed3", "indicator--42c32200-2159-4557-ab66-2f6e32e7db02", "indicator--e3cf312e-e093-4d82-bb94-7bf6895b8fab", "indicator--15d4cfac-0607-44b9-9b5a-b30962636624", "indicator--600866b8-bb4e-470a-bb31-f0f86de1afc2", "indicator--f5e87765-a44d-4581-b236-89ed0a49b2d7", "indicator--5010431c-935c-4686-a299-598c3990c7ba", "indicator--a6d39f2c-9c0c-478f-b62e-3c674fd417a8", "indicator--850be91c-996d-44ed-bbb0-f45258a592b4", "indicator--c719eb84-132e-4986-a9d2-ed3c58aa06ba", "indicator--93f6d2c0-847b-4f7f-b610-7e5697cf25cf", "indicator--8b6d690d-57f1-4fdc-ad7d-b54557137394", "indicator--8b1d822a-2967-4cbc-b769-1a1571e7b6cc", "indicator--d04f3f00-c2e4-44c6-8dfb-fd71648ec6ce", "indicator--f0e54d9a-a946-4e9f-80ba-319eb80f594f", "indicator--c7cf2f3b-e52b-4a07-82c2-db0fcb67e3b7", "indicator--b349ea90-bae5-4dc1-860f-41c9736070c4", "indicator--8f62088c-e4c2-4958-98b6-631ceeec13e3", "indicator--c1ed7c7d-3e8d-41fe-a90a-2497906b1c62", "indicator--9b13ada1-b2fd-41fd-88ad-41d509c0abee", "indicator--69688f69-417c-47e7-a915-cae9d950658d", "indicator--cb71dc38-6452-4389-80b3-47b891203c14", "indicator--ceae331c-c612-4612-ab9f-bbcb7e9ad834", "indicator--48d881ae-b2eb-4d32-9eda-7f61c3d2ba0e", "indicator--f44c2521-b940-42b3-85c3-8c0bc8448beb", "indicator--5345eefb-173d-4fb9-8737-008532fcc5d8", "indicator--8c1a5819-49a4-4dc5-95f0-135bda49416d", "indicator--eb924051-7dec-464a-b907-6555c21aa9b1", "indicator--329adcae-287f-4b5e-86a2-d5e6aa33c65d", "indicator--475b6619-5419-4d06-80db-4226235c228a", "indicator--2d6502b9-631a-47ac-9c4d-60152fd5723f", "indicator--7480aa44-d360-48a2-839c-d33181e09692", "indicator--95e0baae-3e93-4a6d-b834-96e63542bb7a", "indicator--464c1049-cf38-45da-adc4-6fd5173cc3a8", "indicator--cb846bc5-37c7-4c3b-aa7f-90707535a979", "indicator--4bd7d4a1-bc42-449b-b89f-8c7129d5fefb", "indicator--70f0c7fa-7309-4fea-89ae-58e6db04c3cd", "indicator--d25d5c12-ef02-4d74-9211-23ff994082b0", "indicator--91589d81-596b-40b5-bae8-d67c04445357", "indicator--22367c8f-bf58-447f-9c04-4d3ce88792d6", "indicator--678ad736-5f94-410e-a6b8-941219e5565a", "indicator--58d413e7-b63b-4fd2-8784-47e7d6f53251", "indicator--f291e9d5-1daf-4861-9e01-7a02b973156b", "indicator--76b99729-493e-4cc8-8093-aa4b83b06d54", "indicator--03d5f086-9989-47e0-b5da-85fde19a34f3", "indicator--140fbb4b-dd0d-4ee5-80d7-72b0313f827c", "indicator--950723d5-a255-49fb-8029-3d91f0a27d0b", "indicator--3552f29b-5d37-4e84-a00d-4e6fa6812e39", "indicator--2da2d26c-d462-41aa-84ec-b7360a7d37d6", "indicator--93b5c35a-5208-47fe-b175-a5ce4ed107ba", "indicator--ae769ccf-16bb-454e-8aa9-42b933cf78a9", "indicator--1d48bc25-b3cb-4042-b44f-ced641742c62", "indicator--ee1528f8-32aa-4ad7-92d7-347d25ba291f", "indicator--bbdf777b-a2f6-43c9-85e9-678ddb0a2d6e", "indicator--e8983884-0a7e-4aff-afe4-f14c716ccdf3", "indicator--c64837ab-ad91-44ac-9e68-2bab31bd5f9d", "indicator--dc78c958-6f96-4128-b535-c8200b673881", "indicator--6393ec5d-c29e-4e04-a55e-ad7d0e608c70", "indicator--807cd9f9-e25a-43e8-89f9-77298d6f7981", "indicator--45944c6c-135f-444e-9bdd-2e7d4e418180", "indicator--6ce7ab24-07d1-4798-ae04-cff3bb16d557", "indicator--ab2f5a67-ed60-4192-997e-95d1c302dcda", "indicator--e9440e6b-4668-4552-b1cb-67962f7fa0f7", "indicator--2a3bdcfd-98f0-446e-86a0-990f7d568fdf", "indicator--ca241a51-54b1-4c61-a01f-1d9ac29bc79e", "indicator--8ffcb037-d76d-488a-a88c-1459d6486927", "indicator--bf653bc7-e33e-47e7-89ec-731248e97b56", "indicator--9a8206ac-d103-4f5d-bef1-b54914c8cf03", "indicator--b544852b-367c-43b0-86e9-2654ffd23053", "indicator--6960381b-a573-4858-939c-c9b7e6641be7", "indicator--831f4843-5c26-4d06-b3bc-17bf06da15f2", "indicator--0b0acc50-edc0-4a9d-be72-b11e785005a7", "indicator--5f4b394d-e0b8-4aa9-9584-35c6bc443101", "indicator--0fa8136f-6241-44bf-a968-96a4e0119285", "indicator--3bd86f85-96a1-4f57-b3f7-a33a68051ab6", "indicator--1f3b86ad-e9be-4650-b358-70ed86d48c17", "indicator--ae32b356-5489-4413-925d-7d83046ae71d", "indicator--2c0245d5-15b5-490e-9b6d-f287330e321b", "indicator--197daf3a-a50a-4e80-a877-ba36d6869d0b", "indicator--0a197980-1c61-4c6f-a09c-81a3287c6ec2", "indicator--9491ea07-aff3-4609-8244-49f4e266fe04", "indicator--ffd20fc5-492b-42e8-83cd-f3f1ec495658", "indicator--c0079b71-e8ad-4919-9fe6-896b3116e4c8", "indicator--7049528c-f1cf-4ddf-9d8f-798e5a0056e8", "indicator--6445c58d-51ef-4352-b2e2-417f396006e2", "indicator--54cd8da7-8293-4cce-849a-3c4ced9b3982", "indicator--ea81574c-f37a-4799-99e4-ff02f11543bc", "indicator--ea2a100e-58f7-44be-be99-7f4cb242fa4c", "indicator--634019ec-5a8c-46b9-9fbe-14cf766476a7", "indicator--5146bc79-a097-474f-93ed-ded190469a36", "indicator--ab3c401d-6328-4783-be46-f75ec6eff4b8", "indicator--e775a6f4-001c-4cc6-ad7b-0db21ee6456d", "indicator--9e5cfd0b-614b-40f3-9d9c-3b6e949bf134", "indicator--d7a6e6a2-ea37-496c-af84-8a1b52afb5bb", "indicator--38291eaf-1928-4568-86a4-2c967173ea4b", "indicator--fd2ecac4-94c6-4908-ad37-46586b7562a0", "indicator--09128a1f-c8f9-4b32-8535-77b79fcce84a", "indicator--b8c8ec29-6a04-400d-b86b-06a29cad450f", "indicator--bd497ced-3dcb-4d6f-a761-606846aab2cb", "indicator--35423a6b-528c-4694-8296-8bc7fda398cf", "indicator--489e914d-17a6-422b-80b9-ce19f14de593", "indicator--88d29f9f-8bf0-4b58-9e96-aa9f2ae252c3", "indicator--fe0cf363-b992-42ce-967a-bd17baef8a48", "indicator--884fc1a3-4b28-41cd-a7bd-993e6d994ba5", "indicator--1ac5a7d5-4058-4661-be0c-f223232779b5", "indicator--ccf731b5-5d31-4220-a77a-dcfd4afc5762", "indicator--8eae66b0-f1dc-4870-a71b-f6f632eb7186", "indicator--34bfe43a-acb5-48a7-9ad0-409851adace0", "indicator--3d980585-f604-41dd-bea7-f979d95f4338", "indicator--3b3496a3-44c2-4f76-8253-fd0d426aeec0", "indicator--3a93c5d4-13ba-4314-b13b-cc7fcb24896f", "indicator--894a43d9-16ac-43ec-9a04-e7c39979ec19", "indicator--ed68953e-9dc6-4dbb-9dcf-12fb2ddc6893", "indicator--ad911b67-5565-41f2-9a8a-cbab9a8299cd", "indicator--16c9aaf5-30d6-4150-b172-9d0a23baf828", "indicator--6e924549-09ac-4380-8ab4-d370f20dca42", "indicator--69e15473-9683-419a-8190-c283966e1ee0", "indicator--2fcc8648-dd04-4473-b993-f14e2e81de75", "indicator--a2afb36f-839d-40da-a0e4-96fce28b481c", "indicator--eb22ea4a-e718-4f90-b7c0-4e88fb346048", "indicator--776c2470-a4ed-40d6-86b2-aed95729f210", "indicator--e67d194d-866a-43e3-bfba-796ebeadbbde", "indicator--5d1ee528-9e9f-48b8-8116-fc8718165e84", "relationship--082075c7-7a17-44a3-8492-e4c2726ac8c4", "relationship--721c73e3-3876-4b5e-8023-ab0c579cccc1", "relationship--592e6eed-1186-46f4-954d-17a039a3d71b", "indicator--cf2222cf-d5b6-4cdb-9a44-ab4c73b8c40e", "indicator--b5297ecb-46e3-4ab7-b7d9-ed7a0a140a59", "indicator--77e42107-130b-4e67-9027-93d2228565f0", "indicator--ec36b418-1b45-4bc3-82cf-80a6cee465d6", "indicator--91146310-15a1-47c5-87b5-862de11a63f5", "indicator--b4e46c11-1206-4dfe-b524-59597f7dc420", "indicator--870d849f-8c0a-4949-b7d5-037059455656", "indicator--baa4b621-2eab-4441-971d-e15b068d2e3f", "indicator--4e159b80-0f6f-4a94-aaaa-dd914d2a2129", "indicator--b09a3762-3f25-439b-b987-ae6c354154f9", "indicator--597bbca7-3d3b-473c-9f85-2a22c23c2b87", "indicator--c7eb639b-ca61-4368-9ea6-e9bc102be59f", "indicator--f48c983a-56b6-47df-adcf-c26ceefbcf5e", "indicator--32f87c59-a75c-4fbe-ba9f-987fb6595bc0", "indicator--9a03a15d-414f-4874-b955-26b74c443874", "indicator--cb7e386b-e190-4219-88a0-fafaacc72cfe", "indicator--814ec6d4-9bc0-407a-a9e5-7d39368af6e6", "indicator--c2571540-afe3-4213-8d07-3f3d735c4149", "indicator--a53d93c4-8636-4e2d-8a57-f6811a2803ef", "indicator--e39c8c35-eb94-4b81-80c8-58262af29f24", "indicator--3430e863-7818-4608-a6be-70c591637d4a", "indicator--d72531ce-136e-4cf1-8b13-d10cf411c3f1", "indicator--d5eb63d7-b63d-41d8-ba50-deba59c7be72", "indicator--bac8d241-f719-46b5-82b5-70b08e75d9a0", "indicator--9be6e2c6-cb9e-4b73-b53a-a99fe55f163e", "indicator--9bdb94f4-4a4b-4d22-8168-7633520a7b1b", "indicator--449d97e4-34fa-4596-a339-edd9c42b95b6", "indicator--f2c20dab-ad13-476c-9a7b-795c506cc23f", "indicator--64cd6f23-566a-4ddc-a57a-f6e29a670137", "indicator--a64554d3-321f-4d5b-b093-cda8fc978b80", "indicator--c291d9b3-6964-4ccc-af3b-4a0423e94cd6", "indicator--39f26e4a-7433-42e8-9b0d-5c2251dd0290", "indicator--c0a50ac3-0ab8-4324-9d2a-6d7ebd2c9f3a", "indicator--72472362-5a6c-43ed-be89-12642e40db82", "indicator--07d76b20-fe26-4ea8-8fc0-01a7987a58f2", "indicator--df4fcf1b-7ee1-427e-a9bd-c9f7259cf5e6", "indicator--c2defc7c-b4dd-43f5-b47e-90870410e70b", "indicator--9f8983c8-4507-4171-8e0a-57822363190b", "indicator--c4270606-0e09-496f-9cda-10adef970494", "indicator--4ed29dd6-4ec1-4afd-a684-721cf6490e0b", "indicator--0068373b-0244-4b92-a436-683e7f50b1b2", "indicator--989ec4f6-df55-416f-af2e-1b8d47faf44f", "indicator--cec698dc-100d-4cf3-8e2b-fd95d7956c61", "indicator--4be98105-ea0e-4bbd-b322-7aa8c83e67a7", "indicator--7d332de9-ba37-48f0-942c-daca29dd74b8", "indicator--c0bc7e0f-e114-4051-8b44-9830117f83fb", "indicator--07cdb97f-4ae6-48e7-b89c-7fdc14e32364", "indicator--ea282c2f-931c-42d0-8fd1-29a9605e854b", "indicator--497d9c24-6ac4-4714-ba39-82d23bb5707b", "indicator--a4d9561f-566b-42a5-9397-4cb40619388d", "indicator--1001ba42-aef7-4681-99be-33a7f696ec5b", "indicator--17819319-0125-4d17-8ca3-eb93c26d4ad8", "indicator--4dc49670-3541-457d-9e91-565546c04223", "indicator--ca8b4190-2d8c-45bc-a849-58e0eb8e024e", "indicator--a9f9aa07-9340-49b9-b510-4c6b637f30e9", "indicator--081af67c-f7a1-4c01-954b-0e305e3b0ef9", "indicator--fc854ddd-46bc-4ca6-9796-4b01efe7c833", "indicator--58783c2d-96ac-44db-9d8f-242b35016a81", "indicator--669f325c-0445-4b1b-8e6d-34354d23215f", "indicator--c8933c37-1239-4d7e-bf20-3ba68193c50f", "indicator--19ae0182-bb60-47ed-9688-1b0d9fcc5636", "indicator--a267b047-b18c-4bb8-91b5-2917e7997a35", "indicator--e00031bc-ee08-4837-8743-d5de59ba5ad3", "indicator--02d3c2c5-7a54-48c4-a6d9-d320ef05b140", "indicator--3b88378b-5424-4fe1-b636-34b6ab3acf01", "indicator--fa92f0cd-889b-452f-bfdf-ebb52f7fa757", "indicator--11c8b110-e300-4619-aea0-c87b905b37d4", "indicator--8a32e165-a248-4e58-bd7d-74c418bb33a9", "indicator--2855e996-4c85-428e-b168-6e96564d6c83", "indicator--9edf3b15-bfe0-4a19-8b44-8d1333c88e2f", "indicator--b38405ce-12bb-4ebe-b69f-7c92213a98f4", "indicator--7dadcaa4-3393-4074-bed6-253516cb68ce", "indicator--2fb06af4-77a9-47d5-96db-8cd7c6bd1adb", "indicator--99feb001-81e4-44e6-83ee-97e6641b1c6a", "indicator--4a72e9d6-26d7-434e-848d-cf9631ad7fd0", "indicator--165bfd18-081d-40b9-981f-d131902cdf65", "indicator--39f87762-b9fb-4194-8d64-60f15e4ba4c7", "indicator--868e191d-babf-4496-8db5-9346d87a2ae3", "indicator--020b5d4b-1555-4000-a4f1-fd90102a2ea4", "indicator--13524b39-8050-4186-9158-f7cd925d5ef5", "indicator--43e9e283-ac9e-4c20-8a11-7e56a08a8d5f", "indicator--f7c2d48b-5840-499a-ad2c-9c54b8f1f282", "indicator--1194feea-16e6-41d5-b3e0-559ac7aa241a", "indicator--3e281734-3c46-4787-a033-9f16b9333a1e", "indicator--2308e479-7c65-4a61-9ef7-902b570b3721", "indicator--f579b998-344c-420c-8e0f-edc797e5552f", "indicator--f524ed7d-b4fe-4764-83d6-50df8270e1aa", "indicator--8dc13e08-c14d-4541-84a5-418a47047607", "indicator--b2511e2e-f1d5-4978-a378-9b11e782363e", "indicator--8d7292d8-bff9-4ed0-89dd-9472424ea193", "indicator--8e59286f-cfe4-43ee-a9c4-5d7e9bab68c6", "indicator--eb4afcc6-17db-4857-bceb-08d203176d16", "indicator--72ed7fad-ae2e-4989-b903-999950915bf8", "indicator--00ec4ea6-efe0-456b-8933-448588728997", "indicator--921b48b2-cd59-423a-859e-bcf477ae6508", "indicator--eaa2b3a9-2b9f-4e5e-8963-12a15ba052b8", "indicator--2f490a31-58c5-4e86-973f-8ac5e3632bd6", "indicator--3f27b3c8-517e-400c-a503-58b64ba9b341", "indicator--6c76b422-2fdd-46f6-8ea4-9c2149193822", "indicator--29328347-b5b5-4071-96c6-4e435718872b", "indicator--b9a2cb60-0a02-4b68-93cb-35de2c7fa3c2", "indicator--e0151c75-24d1-42b6-8d60-d161d0bed631", "indicator--9c910e90-b941-4ebc-b7ef-95855585726d", "indicator--5d5355b4-112e-4796-af28-a3b66bfcb848", "indicator--2edbf24b-c7d5-4dbd-953a-6cc58a4d0acc", "indicator--1cc83a8f-7cc6-4533-bb3d-3ef38c0573db", "indicator--aa8b3cdc-73f4-4a58-8900-da723e610edf", "indicator--2d377548-34c5-4e11-829f-e99e5d367c45", "indicator--fc71fc9e-ed8a-4588-a19a-54bcff366998", "indicator--39a6c6ec-2d20-4263-bf78-193479b5620c", "indicator--160c32cc-d472-499d-82e2-abd4d1928365", "indicator--ed566561-9d68-49f9-8c19-0b5dc272b13d", "indicator--ff01653e-1a5e-420b-b365-0fc5fe1fe61c", "indicator--c3c785a3-85bf-4487-b082-01478da8aae4", "indicator--bda20e90-b004-4f8a-95fb-21d709336463", "indicator--82c1e915-71ff-461b-80c2-344ea7245882", "indicator--8a4325bc-ecf9-4c7a-bacc-b1f03cb38f12", "indicator--5ca73495-52a5-4624-8031-3a23ba1bf3d7", "indicator--4f5c7d4e-309a-4bfb-8605-155e82bc40e7", "indicator--59c3c31e-be26-4e54-82e8-eef78f408bc7", "indicator--928285e4-50b0-446f-9ff1-bdb576150c5c", "indicator--581f8789-c6c9-40e4-b15c-29de113c829c", "indicator--fd7d6776-64eb-460b-932b-2a6b27af3206", "indicator--55f14ce4-1cc1-46f1-803f-1f90953a2b14", "indicator--614ba8d2-cab0-416e-b036-a34375eb170f", "indicator--1d443cd7-971a-457a-a19d-16c4ea5a9f0a", "indicator--42f424e4-399c-4dcf-9428-32e9bb29ac47", "indicator--3b2a7a37-56de-4399-8f58-4234eeaf51d0", "indicator--2d72b99f-e4c6-4c55-8a74-babcea03e537", "indicator--244a143b-1cd2-4483-b1ab-e571aa025bce", "indicator--6cf968ee-909c-43ba-a524-b6fd8bb6673f", "indicator--11fac661-0535-4319-9d89-8944e23ed4be", "indicator--d4a435b9-44d4-40ae-81eb-316bdf502714", "indicator--cc06871a-ff2d-44bf-ad8d-57c12a4a6172", "indicator--eb261619-cda3-4352-94c9-c3d3f34f41de", "indicator--3451306f-e189-4187-8789-c444217c8052", "indicator--dced8212-5afa-4e3d-ab73-045dc0b07de0", "indicator--ee4ccb8c-3c30-4057-8d0f-3e8eee5fc62d", "indicator--1c19a32b-ccf1-48f3-932e-49a78c4bd1b1", "indicator--a06a0b1f-2b09-4f56-ad0b-5989e3064ef8", "indicator--f169f625-f3fc-4df3-be40-89d2c5876567", "indicator--8456dfd2-b416-408d-b9c5-dc2739e56290", "indicator--43876101-0b8a-41ed-8e51-ab8dfb805e3a", "indicator--a4fcad96-4b61-4536-bc2c-87cf957cf2bd", "indicator--726b12ff-cb0f-425f-a076-a55736425451", "indicator--5932ee6e-5c44-4b49-a649-0c863d729c86", "indicator--61ceb21f-3bbd-40fc-abb5-8afc06f5ef5d", "indicator--2f3fd29f-5d58-4536-bd18-bfdb7f750417", "indicator--da464948-663b-4b65-a1b0-bc41b50626ef", "indicator--be8f3f75-d977-4499-b6b2-3094a01cefa8", "indicator--adea9f69-cf70-4416-9fea-ebaab546626c", "indicator--c242a3a8-8668-4ea1-aa02-b18441753636", "indicator--36d5d442-7f72-49ce-9ab9-c36885a31d33", "indicator--305e9847-a523-427b-aa60-cf891f36e1a8", "indicator--c451c253-711d-42d8-9797-a93d759b79a7", "indicator--a967a80b-ac4a-4050-80b0-a50276928159", "indicator--4c99c39b-3a9b-4c34-8da4-656f4f39c8aa", "indicator--f51e5b5d-87e6-4ec2-b388-54f32f54082c", "indicator--bf2e54f9-c462-4074-8a17-793766572dfa", "indicator--cbfb37bb-cdf5-462e-b8b7-487f1c610c8e", "indicator--ddcaffa5-d2f8-4fa0-b817-69d33329c13d", "indicator--3be3e581-8c8b-4e95-b902-88b34e9c820d", "indicator--0c2a199a-6490-41cc-87a3-034ad089fd9c", "indicator--108b7673-4640-4dc6-b9f3-389dba4e2958", "indicator--4a9db1c4-f67c-4035-aee9-490b1277bbae", "indicator--bda7b792-642b-4c18-821c-c3074b1f4045", "indicator--026340e3-bb98-4076-9945-414339805b05", "indicator--786ad319-c935-4932-b8a9-8c54707a75c2", "indicator--aeb714ef-ba4c-4a84-a50a-b4c0e3802d1c", "indicator--d323ec1c-d32b-4c52-9423-05baf0b8920f", "indicator--50fb0748-b2bb-457e-b2f5-5cc2b6496d9f", "indicator--8a2ee1cf-bfd4-4900-9096-6d7808f5133e", "indicator--18465d02-e968-49e2-ae3c-de3631fc65ef", "indicator--c03bb1bb-dfe5-4c59-9a42-71d3ac9ca38d", "indicator--b814104e-d17e-4fc4-b937-0a4d3ae3db73", "indicator--fe51b563-592e-4372-9c09-3075857d6bab", "indicator--96ebc429-9e1f-43b5-bd85-b66cd555d1f4", "indicator--cfe51153-b180-421c-9b9b-123507299ceb", "indicator--79ab6e83-9e5a-4250-8704-45c53da1447b", "indicator--447b3626-c841-4130-ae1e-75070b7c2e2f", "indicator--49b2e0f3-2860-433d-a56e-9c1d7a8610e7", "indicator--4bef051c-079b-4358-8646-b5d844675eec", "indicator--763a5ee6-f380-480d-a708-439643bb3599", "indicator--8cf49208-8c0a-4639-a6df-1c0c5696f49b", "indicator--72b9864d-618d-48ae-a84e-696a33d23530", "indicator--207e455a-b2c6-4fdd-a199-ab092053a9de", "indicator--47dbd939-97f0-40ed-a3da-bc5ffdf49cc5", "indicator--fecdb636-a837-4584-ad7e-3f4753b6ca4b", "indicator--9d90758d-b59c-4066-9c3b-1fa53344b83a", "indicator--8bec45c5-8dff-4b89-acf9-8aee27f31ac5", "indicator--e3875ffb-8167-41af-b8d1-2bc658d3b0a4", "indicator--90f5ba6c-5d6a-4bab-b538-074b46777013", "indicator--916994ba-879e-4435-a62c-9f0b34eedaeb", "indicator--10e3ee95-3a91-433c-a4b3-b5b2d74822b8", "indicator--8a55e511-0a9c-4cb3-8728-79adb6f9a4e8", "indicator--59e9bd05-9d37-411b-9d82-6f89f9fb4218", "indicator--a3c3d848-9b3c-4c36-bf89-fcf402e46a16", "indicator--c5d80b79-fb1c-4332-96ae-f50956922754", "indicator--49eb76ff-2330-4bf6-b669-3015c37ab459", "indicator--8bdec676-5566-4aea-8ca4-7a6d24eb0439", "indicator--78346f3b-4655-4f8f-8eb9-1ba9c957ce86", "indicator--f98777f1-4ae4-4224-b350-8941cdb812a5", "indicator--8fc52f09-21b7-41af-bb56-2925a13388bf", "indicator--d4d4bd4d-1d4f-4d0d-9d36-dbc9d2be1c83", "indicator--40644806-7856-481a-a511-0c2a48cc2dcb", "indicator--01dfcab1-7633-4bc1-84ad-8d897da8a9f8", "indicator--e3b3a514-110b-49b2-bdb1-20d4b89431b4", "indicator--83d39745-9e73-447b-9841-5d9feaf7b39a", "indicator--375dd19b-be0a-4979-b276-a00a6d88ecca", "indicator--dd476cb2-0925-4ac8-bb58-17473062ad03", "indicator--16f9a7a9-c159-45fe-936d-cf86a1dabb9a", "indicator--302a58cb-294a-48b7-8658-3dce1d9e9939", "indicator--3a68c1cd-2f55-4383-bb31-50a6ab9ae0f2", "indicator--7a9cf876-5236-4f54-a44d-4967118483c0", "indicator--d347a3d0-ef5d-4815-b658-63b38dcc5b58", "indicator--04507e66-5ca8-42c3-91cd-68975be9eb21", "indicator--28bd71ec-e147-4577-b6b0-1f76ee66da89", "relationship--effaaa33-0f0b-4855-98ea-5b923052fd60", "relationship--3fd13778-963a-4234-98de-80838f2ef9fd", "relationship--ada701d1-d541-40ee-a78c-4d4794516127", "relationship--f6a293c4-5450-42ce-8748-20ec9f792943", "indicator--e03353cb-352c-440c-add0-3ee16c9e12f0", "indicator--d6497643-b401-44ec-93e7-8ebdbc42bb2a", "indicator--c31e1008-f76a-4ac2-8fb2-4374f1d78bc9", "indicator--be640637-7351-4196-96ab-113e96aee0a5", "indicator--6dd49b4e-dbfb-4f33-aed1-0cabbad7c38e", "indicator--a1b977d4-9004-40c0-85e1-7f732dd801f3", "indicator--45355c2d-568e-48e0-94cf-49ff7279245f", "indicator--ed631a23-003c-429e-b46f-7e85c2355449", "indicator--a84db925-3d3c-4056-a141-4d0af0d87be5", "indicator--f89ca404-367d-4d90-a301-97fe8e3b53e9", "indicator--21d29b38-1488-473e-807b-efb77e65281f", "indicator--2e38730b-8db3-41d0-b114-83a09c0418fb", "indicator--f0e74a78-b59d-46dc-b5cc-d2830677283d", "indicator--65938c0c-a20d-4044-ab3f-6740714aa365", "indicator--e8595d0a-14e1-4ba3-bd5c-d4a427dd67ef", "indicator--928c3745-24b7-4ac0-81f4-faa0873b9057", "indicator--5f6a2477-490f-4587-b2b9-2746031b75e3", "indicator--b27bce81-e55f-4506-b599-f4a3758fd22d", "indicator--ab6f694e-ed15-4cbc-8dbb-0a3e955c4e4f", "indicator--04fedb81-7202-4dd9-a622-63c968f7cd21", "indicator--3367cfaf-9839-4515-bf34-f2e7b33316b3", "indicator--b2498d83-fb36-4c90-bea4-fe353a21c768", "indicator--1eed15d4-b88d-4317-a3fe-80f596cf39e7", "indicator--7b0afe27-1191-47b3-8614-ca3c1f15a777", "indicator--60435304-bb0a-46b2-813d-6bdc892e218c", "indicator--166a6e14-5f99-4489-8ec9-84fff85ce63e", "indicator--e9365ef9-cc78-4e1e-af34-d52f7786c074", "indicator--e9539192-9b86-44a0-846b-c847b9a3e1e6", "indicator--8aa0f859-880e-4b8f-944c-ad4abd008dcf", "indicator--ccc70bae-4ec7-480c-8d01-1f06af3f695b", "indicator--1bbe2f58-8d9b-449e-b7c1-75b866edbd67", "indicator--b00d9dfd-d528-4984-9a94-ae1557fc8eb9", "indicator--e948e48a-2ac4-443f-8c08-4d663abd1cbc", "indicator--defeff3b-9b9f-4402-b073-ccdc502388b4", "indicator--d31f68ee-3cc2-44b8-9b92-2b5afbe7cf45", "indicator--9744fb77-cdab-4efa-ab4c-cdf4394f9e85", "indicator--2e207ce3-4a33-406d-bf0a-fd26b3abd3b6", "indicator--216a4f67-6e2b-463c-8404-2f4e0d0282d0", "indicator--667ada3c-fba9-4356-9822-1df54f1bf697", "indicator--dc7bd59e-2473-476c-8924-682250070a4a", "indicator--1ce76d70-78e5-4eef-a52b-4e2a1515d655", "indicator--5e1da196-ac3b-49b6-9dd3-74f603a6ae57", "indicator--2a4bd77a-2fb0-4293-a900-0e4a7f0f6d7c", "indicator--7908f852-4eee-48bb-abcc-cf2006e9fc18", "indicator--3431757e-3e3b-427d-9966-3e42e736b7ce", "indicator--cfbcfc74-0497-48c5-9028-297df2d2ca60", "indicator--a03cd172-94cd-467e-833c-7428adf34702", "indicator--4b10bda1-d416-40ab-beaf-1b8c82744740", "indicator--441f2bc1-6534-4724-b164-7cdc42064584", "indicator--9494efe5-202f-43aa-9eaf-7b09819296d3", "indicator--43b0f2a0-bdb7-45a8-bbe5-14c73c3b6030", "indicator--3a619e94-684e-462f-88ec-cd3110a9a225", "indicator--ae95e656-2a6d-4c91-a7b7-730c5351b205", "indicator--b7ae258a-1316-4a46-924b-14b55ceb1420", "indicator--1c368207-6d25-444a-ba69-721d30a0a992", "indicator--5160d547-5981-4960-b881-54dcd236c56c", "indicator--1cb0082a-edea-4620-9df0-c6bd676eb7c8", "indicator--3010f0d4-b019-4c39-94a4-2e418f44cd02", "indicator--4ca1afe7-7993-4d6d-bc7d-6b3ea428d1ad", "indicator--a54fd085-e369-4ae3-a521-90bdace7cd7a", "indicator--31abf6eb-35c2-42e7-94a2-6eec8c83e4de", "indicator--33ddc903-57ff-4255-ba09-ccacb2009898", "indicator--14d1007a-a094-485c-b832-fe75b17cc497", "indicator--e5948191-eeb3-49aa-8213-cd58c677958a", "indicator--a446cced-af61-41eb-bb25-74a72bef8103", "indicator--5e572087-23aa-4ec5-a69b-1fc2926c6d0f", "indicator--242a4361-03fb-40b0-b57d-29a8ace4ddd9", "indicator--aded10af-593b-43ca-a37f-a5eec572ed51", "indicator--c592ccb8-27ec-4571-a8a5-af2eb765a08a", "indicator--a666ec8d-7a44-4dc9-bf1f-e787fda3b3bd", "indicator--d910eca7-1d14-4a7f-a84d-e2e64fddd466", "indicator--52efd699-b795-49e9-9f19-96dead681629", "indicator--3a38625a-9ff2-429e-9d9a-7caedb75bbd3", "indicator--6083a7ff-9567-4b37-8eb6-9fdb6f2bea37", "indicator--ad1c4920-d120-43b3-920c-2af29d3cd6bd", "indicator--8f0e1edf-9247-4e08-93b0-150e6ab6935d", "indicator--17b32468-a21c-4f92-9760-1e048149951f", "indicator--6f03d9a9-1dbf-41da-bb3e-f5ba786372d2", "indicator--2f74c5d0-c339-45a9-adc3-bf6599c68052", "indicator--faf6d75a-2ab3-4484-9e5f-5e738f64bb2c", "indicator--48743a0c-b453-46ad-83dc-cf53168624b0", "indicator--3d8189a1-f2a4-46d1-be95-d117571bc834", "indicator--dc600c86-342a-4786-9fe1-25e9280893e7", "indicator--7f9d8c78-857e-4592-8afc-e24bedeee65e", "indicator--2ff87134-2471-4288-a675-6add74d43f43", "indicator--ed6a0ba4-a461-478f-8f0f-4a17cc783854", "indicator--abbd84f5-b274-41d5-acbe-f3870b0cb908", "indicator--6d202bd9-9fec-4a8c-9883-b4e378d30630", "indicator--a3a1bbb0-9408-45b0-8635-3e9e5410ce4a", "indicator--99dfc2ba-ed6e-4a71-a331-96886c0a2c6d", "indicator--e352bb57-d4d1-49ac-9c25-349bcbaa8fde", "indicator--434c9513-de57-4a44-80d6-63f19a49f7f6", "indicator--ab7bb818-3467-47ff-93a8-b8b95c1e9fcb", "indicator--16cd8454-f974-4f38-94de-b68962cf16bc", "indicator--9ea580e0-2f41-4af9-9b9c-66f4cdcb4061", "indicator--3b5aa353-aa46-475e-8a80-92c14b4a34d3", "indicator--341af1df-c04c-4fa7-854f-11033f97a36d", "indicator--6c5c6ff5-2385-47bc-91fa-0d7c4f212c91", "indicator--06bb7d18-956e-4785-9d92-046c768f6f35", "indicator--9432d959-1c99-42fa-ac0c-a67cc014fd6a", "indicator--596d2486-0a86-42fb-80f3-d621ee4bece8", "indicator--6b6ac50f-63b0-4d95-8db1-79d682965104", "indicator--03c2f491-96e2-448a-95bd-5d9ac59567c6", "indicator--30269b91-ad87-45f4-9234-1d029c6f95b7", "indicator--82d076f3-02af-45d6-a5ba-52507d274e44", "indicator--95a91baf-f0c2-4bb4-b56d-546ff36284c2", "indicator--ddfb5ff2-7afc-4d46-8717-51a5b4af085f", "indicator--c552911d-ca45-4c2d-bed1-0b64dab33618", "indicator--ac976d39-d97b-4418-8b48-9efe9546dc86", "indicator--2297d4e2-d9da-4a65-8374-1a2f04b6d3a1", "indicator--0457326d-9757-4c54-adbc-e7d4413b08f4", "indicator--df520cc6-05cf-42c2-8715-1fc2b1f5a139", "indicator--f18c8b76-c183-447b-9043-fca5beedaf50", "indicator--71f5bca3-7bee-4255-a0dd-08c3271bf21c", "indicator--7fed4a96-3137-4804-b3be-7b67c79148e4", "indicator--d61a19e7-dd08-4b81-8362-56ab81d53c38", "indicator--c10eb4d5-3c1e-4b83-9a42-b6ca4a167acc", "indicator--d79aa9ba-27b9-42ea-ab76-383df5231571", "indicator--f3c33606-5176-4c44-bbce-b652811e781a", "indicator--73239d6c-ed49-4259-8238-36273da3ba5f", "indicator--e94c95f8-d98e-4675-bbff-a2a754c61144", "indicator--e8523ba8-97bb-4fac-978f-3585f8fce74e", "indicator--d76628dd-232c-4c9a-b691-eea0cb46ef26", "indicator--1d5285c5-cd43-4ac8-a676-a6c3e26d3a21", "indicator--a654c966-b01c-4f61-a3ba-0312519cf8f0", "indicator--86a0d372-5e70-4c4f-be79-740d116982f2", "indicator--b4da7667-1ff7-4826-9218-bf17901edd4a", "indicator--daf698a9-e4b1-4e10-9bf6-01d0f7ecc30a", "indicator--8270e260-ba15-4717-b051-ab6e62d2adf5", "indicator--df90269a-6470-4128-90e7-53db4c159a5a", "indicator--f50707fa-ad94-48e0-b95f-d35e3b04d0e3", "indicator--5dc4411b-93a4-4a34-af2b-853a05db75ad", "indicator--ce9a1e70-0c21-40a0-92ff-083965fe3c8f", "indicator--9bfb8e13-62c5-4377-9dfb-ea25e6d638fe", "indicator--f90962c8-1111-4492-88d3-f8f5040c44f4", "indicator--edd974cc-a61e-4e86-b535-c6ee7261ee3a", "indicator--ec7d06c1-485d-4623-812f-1f033a91298f", "indicator--fb6eedac-fb68-4422-96b4-7de1aabcceb8", "indicator--2a711603-10be-4fd1-8194-8ab8bb42af6a", "indicator--d918f137-e34a-44e6-a123-b77cb3c0d6dc", "indicator--66f6aae5-cbe2-48bd-86a6-d2c7c733aa51", "indicator--827c2f2e-6c37-4951-9c50-5b44cf6d7360", "indicator--397837e6-cca2-4bc2-a4dd-04e939c9e320", "indicator--58ad7214-6d14-43c5-8e0d-50bcf4b32a37", "indicator--df973a2a-856e-4d8d-9582-7a65f6eff73c", "indicator--11e2de7a-22e1-4aa0-b753-cde24900a758", "indicator--af35df81-b159-4cc4-b2a5-75c1bca637df", "indicator--d05d33fe-3618-41d0-8d02-bdaf50350f73", "indicator--d687a8ad-1c57-4ea6-98a4-44a3d5c51eaf", "indicator--1cc4dfb3-ee3c-4f46-b7f2-5557000dfb1c", "indicator--b8fe97cc-0378-4a95-990a-983194a801e0", "indicator--32e150c9-0985-4a8b-b7e4-e602fea586ee", "indicator--d4d25e7f-e6ba-4579-8a7a-664c4ba59098", "indicator--e4857c90-908f-4143-8630-9ea417354b2c", "indicator--bbb53134-8b5d-4a43-9d18-0799a3248d0e", "indicator--c1560ad1-3ad0-4915-abcf-b417357ec2c8", "indicator--79cbf570-3b7c-4c5a-9993-8e5fe2ce58ad", "indicator--87251830-e349-44b4-a586-dd449b06b1b8", "indicator--34cc7196-9a1f-4081-94d8-b1d75bb4f65e", "indicator--6d7f7e8a-49bb-403f-985c-e0126cd8cc16", "indicator--53a9432c-3639-4e26-a185-34e68d42256a", "indicator--6ab6b3fc-707a-4ec1-a77b-c1907fd2d1c6", "indicator--3454f8ae-a784-4738-becf-35f42ae9ef19", "indicator--061befc7-2655-48c4-9367-bcc7511dfe07", "indicator--46a28666-be57-488f-b83c-06993a2a4568", "indicator--76c54571-a21e-4f0d-9ee5-42f59485b020", "indicator--ad411aa1-8e67-480f-b62c-e9d8ee1556d4", "indicator--7bc1c3bd-f66e-4f1b-a523-22ec032eb392", "indicator--28a5f314-5a07-4819-915e-7bad700c2951", "indicator--0df7b451-6ff1-4784-93c5-bd42434dbe7a", "indicator--cb106779-8585-40a7-a4ff-8f2b5662207e", "indicator--116e983f-dbd9-4577-b249-c9ee89b33223", "indicator--4fa9e259-68bb-430d-ae68-af614ff41e8f", "indicator--f63ddfb2-cc21-4a7e-a792-5853bc1f25d9", "indicator--be26813e-5c16-4171-b874-969357a5e160", "indicator--51468177-5cb9-4e89-9d23-f6012d60ae8e", "indicator--6a8e89ac-10a4-45f5-8e56-cbd155733cc1", "indicator--c95431fe-bd28-4f4e-9423-6aa69cad5a8c", "indicator--ac14b4c0-ef19-4ecc-b5e0-782f41663b4a", "indicator--73b63c1d-297f-499f-9d79-070fb5232a60", "indicator--39b85361-43aa-4a3e-a5c3-db768dd71d64", "indicator--562313c4-eb30-44c3-b58d-75bd6a54638c", "indicator--ab6eb8a6-ca75-495e-b93f-bab5f9fe8ffb", "indicator--cf6a6f97-c07b-4500-9b48-58e60832f5de", "indicator--2a943610-08a1-4618-8e1e-5428e72d79f3", "indicator--298fa663-73ae-486f-a7de-d9ec6ce25f9a", "indicator--412d299a-bf48-4617-b33c-3873d7566ee7", "indicator--28910c33-b513-473c-94bb-275679b4e827", "indicator--9d01e828-a109-4bdf-b2db-227b4ea81b11", "indicator--828a7d33-3d32-4313-8496-99e9a2f1abda", "indicator--3fcbd216-12e2-49d0-9181-21d23acdf075", "indicator--c3cc1798-7d83-4b84-99ca-06231fbbc9a4", "indicator--144a672f-d9f1-4e65-b11b-b5fb8e973b2c", "indicator--1522af29-e7de-44fe-ac52-84dc7584642d", "indicator--816c193e-c70a-4759-97d2-b51bae358304", "indicator--0661486e-d6e3-477d-b5cd-a6039f046437", "indicator--e1586efe-1d25-4ef8-9060-91c6e7d9a64c", "indicator--545dd208-86b2-48ec-b3af-8c91897c58ac", "indicator--f058f3f3-c203-4342-aa4d-21de6e8a5416", "indicator--e0875276-23f1-494f-8aac-877a78dbae1b", "indicator--614fa251-cea6-4993-acdd-1f7c70854ba6", "indicator--eaaf7355-a890-451a-a245-d97f6dd7f34e", "indicator--40d18ceb-ac73-4892-9713-6fd60df0fed4", "indicator--ba573a19-8ff2-45f4-89ff-25624d1e652e", "indicator--266e92ae-1fae-4c6c-9956-151366a38e94", "indicator--555cf83a-d09c-434d-8698-1fa908bff7e3", "indicator--9d57d04b-ba1e-4830-856f-77bc18189741", "indicator--f9c66c7b-4dfb-4a7e-901b-392ecbe9e2ab", "indicator--2bc1acf7-792a-4aa9-9731-bf933c9851f3", "indicator--055a79cb-8e61-4a75-917e-178cc4d73780", "indicator--f90fabfa-3079-441a-b28a-6622b261039f", "indicator--70bbe95b-da55-4ca0-ace2-49fc87c53b52", "relationship--94e3f5e8-f7f7-4477-b396-db5dd46ceb9b", "relationship--e0247080-ad0d-4201-b2e0-18447bdb3917", "relationship--1bce9485-8eb5-4881-a0b5-248f93fb1bbc", "relationship--a13e28aa-4200-4aff-910b-6c678043d510", "relationship--081249da-074b-4799-be93-4741250402b3", "indicator--bfe5ae49-5215-4390-ae06-df6c08ca7216", "indicator--6ac52d28-53ee-4171-b829-3899c89c6a43", "indicator--45ccc003-1d61-4e3e-beed-a5f1eccc9f58", "indicator--83854167-2252-4638-bb32-33d3e938503a", "indicator--c94b3362-d1a3-4b5c-9d02-9373f49e8d15", "indicator--52a5e4a6-d644-4cf7-816c-d9a51d17bc52", "indicator--2f596661-193a-4ebc-9d23-1d640a3d121c", "indicator--c884726c-5d26-4895-afee-d6815cf5ff4c", "indicator--338282e9-649e-4241-8cab-5c1c57b7da82", "indicator--bcf44b18-8375-471e-88b1-66610d5d0243", "indicator--8caad2b0-0d5a-4235-9f4c-255c6650476c", "indicator--e793ea6b-411b-46f5-a98e-7feec7d551f3", "indicator--3f4887db-e87f-4a61-83ef-95be318e9cd2", "indicator--76ee9af2-4a9c-4158-a85f-6d3929bfa876", "indicator--f9a5a396-be45-4c33-8014-0aa7bd55d096", "indicator--a273bd15-c24f-471b-b1a3-75884be038bc", "indicator--edc6376e-a016-440e-9026-0c717043d440", "indicator--bcbd3ff5-0e22-4beb-bc51-9de8dfc2f218", "indicator--a37cb9c0-dd88-4107-9ae3-718942613016", "indicator--555f94fd-fe93-4d2b-b632-8716e8903433", "indicator--41b28915-43ec-437e-90e1-e0c095fbfd60", "indicator--2cb79836-a6d0-47d0-bf3a-954576c95b8d", "indicator--2a26f70b-a394-43f0-9aad-2480d6da2500", "indicator--c92776e2-ab3b-4d7c-82c9-80140b4839a3", "indicator--3673ab3a-8a2d-4f8f-808d-bd1c5f7b622b", "indicator--25ea27c4-5f74-4846-91ae-417d362a4b4f", "indicator--4670df1c-3c80-44bf-9b7b-d49f6926f45f", "indicator--2127af5c-7b3b-4495-87b6-91ce6206e2e0", "indicator--bc5e6ffa-acc5-4d90-a76e-9bf239ce9537", "indicator--f3868ddd-b466-474f-b324-efce57f080be", "indicator--aa55ecf6-d52c-4ae8-a5ec-0ca8aa2c84f5", "indicator--1af9cecc-ad52-4899-9bf1-5f105bdfcf99", "indicator--9890a662-b4b5-4a41-89e6-853e99dcdd76", "indicator--0858916a-9ef1-4802-a7b9-9e6f077b5df9", "indicator--a56502c4-8a48-4851-b43c-35732c9cda54", "indicator--8333a3a2-6a25-4fab-aaaf-4af08f239b0a", "indicator--213bb3cb-2d56-4ea2-88ea-fa2604ace96a", "indicator--0719eb33-9d0f-4afb-a7d4-e62d34be0994", "indicator--7191a586-ad8c-4b1c-afaf-70c8460a6eb7", "indicator--8525fbb4-d7c0-40a3-8bc2-ec604d67e241", "indicator--11bad928-7426-43d5-acc5-6ef00bbcef87", "indicator--32967721-7650-4f09-8067-730233856a1a", "indicator--45bccd38-8723-46d9-b162-936af3620e5c", "indicator--905f1bd1-f6c1-403a-8b40-d20bef3dcb98", "indicator--2c36bfd2-b766-424b-8710-ccc6b889791d", "indicator--f7224ec2-bfe6-4803-a8a7-712e1d8ff10d", "indicator--c3eea6d1-af90-4d9c-a2ba-22df93a9bb97", "indicator--0fb1fff7-c73b-41f7-b716-56dfa38c74e3", "indicator--cf69b131-aa51-4ca8-a8ff-500ed48e0b33", "indicator--287d6873-e1af-46d8-b63b-715da9a59d3d", "indicator--830d9380-41d1-4723-b041-d9ad8ad24417", "indicator--11f433ac-4149-42e5-a0fc-6bb8031cc7e4", "indicator--8bfe9614-8f6d-4074-ae06-9ae71f65e002", "indicator--183df936-5588-4ba9-be2f-b820eb17c0db", "indicator--7060622d-19fe-41e0-b840-337149884dcd", "indicator--998c21c8-7d6c-4422-b727-8d8137a7925d", "indicator--7fd0d8b3-5516-4005-8bfc-01dbd4ebca16", "indicator--554a14f8-c56e-4b05-93e5-aa4329c1ea04", "indicator--25e0c715-94f4-407a-87f1-ca8a531d0001", "indicator--4befa92c-785e-4e3c-bd3c-e49dcb55412c", "indicator--f01b8b1b-04ca-43dd-b938-69ecff669b38", "indicator--6aaad201-d996-4a87-92c1-00a5a747ef49", "indicator--e2b89df1-ab25-4dcd-ab7f-77fd5e630bc0", "indicator--526876af-da3c-47de-b0c7-9a27a3922b60", "indicator--e325b0eb-2763-4cdb-954f-b27b43a2eb58", "relationship--c127c9f1-f739-4ea3-9a25-26b61ed0953f", "relationship--f1aa0c91-df53-41e2-b3b8-755299d43c9f", "relationship--f24b894c-89dc-4171-b2dc-f19ac9e82543", "relationship--f480de37-e71e-4754-b289-8ce9285695dd", "relationship--7e23a281-603f-43c3-bfd7-7d767514af48", "indicator--5725c2c6-fe68-4862-8aa7-1625d9489cab", "indicator--79f8e28c-41be-4afb-a965-ee1354426146", "indicator--b6653045-420b-4863-9586-21a9e7a56162", "indicator--3bfe32ba-9290-452c-b2d0-54444196dd9a", "indicator--42624c57-7083-4511-aeb7-851bd382f9ae", "indicator--ee792837-bd83-4623-b929-ed204b248b1e", "indicator--1551cfab-19c0-4d9c-8dda-7918f83e0d87", "indicator--0ef0773e-386d-4367-b3f5-b6b64a246ad1", "indicator--3a36b047-bdf6-4036-8576-cf8d04b89471", "indicator--fa815b8e-3c3b-454b-aead-78527f796732", "indicator--652e5a73-1981-42cf-8ed5-fd99a436b0ab", "indicator--8d2cc9e0-1950-47d6-8f5c-ea94e95f27bb", "indicator--bf59366a-6790-4d15-84c5-7eaa978096da", "indicator--045deb8b-207f-47bf-92c0-e58ea6d4a87f", "indicator--4a47f897-a68a-44f5-956b-bda33e01e88e", "indicator--23f888e3-0023-4be3-9cec-08fb8c34765b", "indicator--de093cb4-17f9-4c4e-bd7d-9c76d028ca51", "indicator--8af2718f-0f05-4d4c-b743-17f13817d357", "indicator--6f4a8a63-da69-452f-841e-2a278788817e", "indicator--405aa2fb-70e2-40a1-bb82-122b13d12718", "indicator--c95ae006-5f93-4f10-b5e3-157071cd3062", "indicator--b3c995f3-eeb4-4a4d-ad5b-c660301854e6", "indicator--04cd763b-b680-4531-8330-3f67572fe6d2", "indicator--32f0f951-24dc-4b56-a73a-5ba3603285e8", "indicator--78358121-073e-49e9-aafa-3157e1c936b4", "indicator--054af06f-9239-4900-b835-f25eb7d15406", "indicator--0cde8093-68d8-453d-9882-041320a46bc8", "indicator--2dfb7e1b-c6ec-41fe-9039-20d70e0b010e", "indicator--5a75000d-7d20-4b8a-9c3e-7ec08bdb6312", "indicator--ce9cc7dd-d396-47b9-af2b-06dff9665071", "indicator--fd7f8893-75c7-4d81-93c3-cf8c7671c4da", "indicator--79cb6c19-0175-4395-a7e3-fb220566053f", "indicator--4dcf43d9-88c5-4d9f-a449-53154adc63ad", "indicator--5c933081-b6cb-4e53-96fe-c0cf5aa5d515", "indicator--3687ebb2-64d1-4948-ac58-b54c7cfe9b9d", "indicator--f3a15a6d-c183-4796-9a76-b198832150da", "indicator--6ac2e2ac-d438-4d69-a04d-c2c2db2d742f", "indicator--6641048f-06be-4332-88cc-0950fa7887c0", "indicator--900c98dd-304d-4d17-811e-8def8a7746cb", "indicator--aced0d5a-35b0-41d6-98c0-d111d94d241a", "indicator--d6e985d3-be0f-4f91-a0ef-2e18d720c96e", "indicator--88e2a231-0ce3-46bf-92e9-7034be836545", "indicator--b30b86ee-e399-42c3-a945-7023f4fdf55f", "indicator--12530cfa-9716-4e9f-a8f7-021e8b963e59", "indicator--f4fef336-7607-40b4-8311-75fb9491c855", "indicator--24ab438c-b0e1-4361-acbd-b9697550f723", "indicator--a7c9ea21-92ae-444a-b343-a01eb01108ed", "indicator--6a9f7c0f-90a7-47df-ab7c-28485b03a278", "indicator--57feca61-3d50-4854-8b09-dbceab5b7e07", "indicator--f8fbf546-bd14-407f-9d81-ff7ba788e3ae", "indicator--f822588e-1fad-43dd-a8d7-b94f2c1f061e", "indicator--0cd8c0e8-3f19-4349-a002-ece5b8e1fa0b", "indicator--82b6ae48-e216-4d7d-a752-54354c6e158b", "indicator--ec221804-b532-453c-955b-eb2ac1c17a78", "indicator--d01b0eee-7575-456e-934d-0ac4d4901868", "indicator--a97644fa-99ef-4f74-8b98-c1db4e58f443", "indicator--2ffa404e-afa5-4339-81c4-406da16fc4e7", "indicator--798c081f-4c50-4224-aaf0-e11ec83ece57", "indicator--a450655f-aa11-4f6a-a545-9f077aaa3e0c", "indicator--dec3447b-61d9-4f17-8708-4326384edac8", "indicator--316f4e5c-d37c-40f2-a05f-11cbaf69c725", "indicator--38e2eed9-d187-4fa8-9043-5f2d237cf239", "indicator--c97da8d5-9327-42ed-b06e-0b22c7effe33", "indicator--0e8ef28c-11b3-4595-a88b-8f29e5c0546f", "indicator--53239c1a-4e7b-4dbb-9d24-41e096cfc959", "indicator--c273186a-2d0d-4be3-8dd7-b0a65201cb3c", "indicator--a708a489-46da-4c60-a76c-16dfb380943a", "indicator--d9cc0f05-9817-457e-ae71-bd762cddd22b", "indicator--965c0b59-dd94-4341-86ee-8db56427654a", "indicator--4cea9706-d702-41aa-b213-523dec55be0f", "indicator--1d55c59b-624f-4ec2-b8a8-6a84fc1cbfcb", "indicator--e3738f7e-5de1-455d-8a85-cd9ee070131a", "indicator--660b0c9d-5f6b-4474-ad2b-15d42ce6b99e", "indicator--f2b0d7c2-e765-4773-b7fd-58bb845529d0", "indicator--439151ef-3d44-4d83-abf7-f720757ca10a", "indicator--403dbaea-b10e-42d6-a098-b7d9045537cb", "indicator--f138803b-29dc-4076-9be6-3ece0da6e68c", "indicator--82b424cf-17eb-43f1-9462-9aafeab10ed1", "indicator--add56ffa-67d9-46a7-bcee-0cc75101b505", "indicator--2d303a79-8f01-4ced-abe4-257f1b77e524", "indicator--b192d877-3d08-4565-80db-ae6e9b8e21ae", "indicator--80d7f69f-950c-431c-bc71-516e848b8bb4", "indicator--0f6e6551-6505-46c4-b2d4-0e2138f58a73", "indicator--d8e7ff93-3ccb-4d6c-9977-4cb5f05a94d2", "indicator--a7b06c76-cd53-4f2b-8fcd-bf3fedf950e8", "indicator--30752bea-1f83-439c-b14c-151a3ebee534", "indicator--bdd8ea5b-8c4d-4b94-97e3-3f2b3c5a7bfb", "indicator--9358ee2b-27fd-4be5-a120-3de008272aad", "indicator--7f6d5b81-6fea-4653-a210-80867027720f", "indicator--6cc8890d-c278-4cfd-8c04-7eb60d974bc9", "indicator--391ddff1-0862-42a1-9844-2eb53dd27245", "indicator--a1e7149f-19bb-4a3f-93c2-fb3ec1e5b5e7", "indicator--0bafe004-547d-4733-b92f-d2dcdec816bc", "indicator--ee130460-9130-4a58-94ea-f0f69ad14172", "indicator--81a115af-769f-4dbe-846e-01a3cbc291ee", "indicator--bd6cc171-481d-410a-baa9-eaf266527fa8", "indicator--b1669667-8250-40db-9ca9-3e31b4ef6a3a", "indicator--4eda5d70-9e5c-4632-ac26-483d6a4b9980", "indicator--5d4125d0-ba51-4823-a8d5-8b9e78645d2a", "indicator--36c5bd89-e1f2-4804-91de-847bbed7e60a", "indicator--e07a743c-411a-4977-80ce-6c4d03e02e13", "indicator--fb05ac21-4a8e-410f-8d22-f9cf226feead", "indicator--e11321c0-cc1e-4158-9072-53dc408c5d0d", "indicator--b0cc3666-bdce-468e-b973-dab961a0769f", "indicator--470af2d0-d3cd-4a93-9c50-ee0d6c835444", "indicator--2d0f7687-5977-491e-b322-bd11e997eb6c", "indicator--21544e3e-b850-4f34-97b3-9b49318edc27", "indicator--b7e3e964-8cb4-4c20-b74d-0ea1c2ddf17d", "indicator--19bd1e6b-63c9-4e51-ae61-f9fe0d65df82", "indicator--eb78a3b1-3f2f-48ed-a7e8-31c1d3908cb8", "indicator--004d7851-a9d2-4969-a173-73b3ccaee8a1", "indicator--ed3da2a5-313a-4381-afbc-4792e3f49921", "indicator--e80d96ad-aa96-4753-804f-9e75254f9ec2", "indicator--b63f01d3-833b-4a00-ad93-01135e0319c3", "indicator--8363d679-e933-413d-aa1c-0c8a6bad0ae9", "indicator--3e26e806-c87e-4dd6-a19e-b8cc292f42d0", "indicator--f96b2b4d-0fb8-46b0-8bf9-c217ecc37d43", "indicator--f134f646-4d6f-4008-9c5c-6729275095c0", "indicator--a32895fe-5b61-4ae0-ae9a-4379919ece9e", "indicator--99b6276b-b649-4475-a352-da0da783d419", "indicator--db6224ae-f961-4897-b65e-66161dcfed86", "indicator--5fc679f2-3808-45a6-927e-c14ba9688009", "indicator--390f94c9-68c4-457a-bc29-ecf3b36b3dec", "indicator--bba6ef43-85b5-4666-bf33-70541f5e97c2", "indicator--83b0d936-f734-4bca-8cf7-80b04963c6e6", "indicator--8dec3cf9-8b0c-44ed-9cc9-3f9e0be7f738", "indicator--fecb1f54-9875-42ed-a880-8f6766a46cdb", "indicator--334e1028-58a9-4b70-a9ec-174ed29050fb", "indicator--88c64e1b-fa50-4ded-b7f0-61966f298861", "indicator--68007b58-2b13-4ea5-9ef3-df126b6400e6", "indicator--e47aa075-dd8b-4045-ba1b-d86c71d12b94", "indicator--1fbf4ada-a2b6-4a95-bc53-f6fc54a7c5e7", "indicator--431cc3a6-7709-45ed-81bc-9dcebbe8a85c", "indicator--7ae51d97-1be1-4d0f-bf6c-2f0a1ebd0380", "indicator--3b3084b4-27da-432e-80b3-8b2712eda2dd", "indicator--c5444567-876e-4a01-bdc6-1520c7422e36", "indicator--12daa5a8-3c1d-4797-b90a-6d1dfa548b35", "indicator--54334a21-890f-49de-aae6-e7cbf599e02d", "indicator--3f22329c-592a-4843-93af-e2f447081d12", "indicator--352a0a7e-c2a1-4624-93bc-e9bd079c857f", "indicator--94fbadbf-7db7-4258-889a-49d7edc6ae68", "indicator--45d35ace-2f3e-4806-bc1e-fd25c4c73e2d", "indicator--607b1f32-1f69-405a-b1d6-5b41d2274d6b", "indicator--a06cbec9-5614-4169-a638-186823441f70", "indicator--588681d8-c1d5-45f9-a8a1-f5aefed3a20d", "indicator--923348c9-c616-436d-9405-8208da4810ce", "indicator--923b6afe-93bc-4b49-8c0e-64d3bdb11484", "indicator--51f1d27a-8108-4066-883c-ba9397f5b759", "indicator--ce837717-7342-4719-8ed3-ce2401b64bed", "indicator--e9189f90-976a-4c7b-9104-ba28ef1df1e9", "indicator--2c851c88-9e56-46ad-a1b6-559df711c894", "indicator--ba3b6a01-a1db-492d-9ef3-ab3271b76359", "indicator--08ae93e1-aa41-41b7-b7f7-f2713ab3c8db", "indicator--4272dac4-eccf-4474-a072-56c318bdcecb", "indicator--c1632089-d19e-4725-b83a-bc07893a1488", "indicator--6ace024a-2299-4f81-b07d-9d65c772474b", "indicator--8ed94d17-2caf-4ac7-a6ea-4ddffc92da84", "indicator--94c4e488-7bda-4dd4-a254-eb3f29a40b9b", "indicator--64c18338-d069-48bc-847b-7696399086a4", "indicator--c18e8ea5-769f-4a10-affc-59066575ad8f", "indicator--04109964-cc75-4e58-8d8c-b65fa8b98d44", "indicator--8819237d-a478-4e62-a8c0-ed655d147276", "indicator--689caa65-61e2-45a2-8493-18c49205f88c", "indicator--db39e921-af86-4039-bd4e-7335e21c3596", "indicator--5d0cb334-85c7-4fdd-8051-380b91584c88", "indicator--bab96fea-1d5a-437a-887f-4ee118367937", "indicator--f154bc11-f7fc-4537-a207-891e424c4e10", "indicator--dd0b24e7-d380-451a-9520-537f12d3ba66", "indicator--6a96a40f-b9c4-49fd-bff3-02dc6ea81aaa", "indicator--6cab0a14-ed76-43fc-a4f6-93896e60c507", "indicator--94977cb8-d784-473d-adb6-36369a7bd241", "indicator--36474e2d-830d-4243-95c2-c6490b1a4783", "indicator--d0a614ad-f3c7-405d-aa30-9462f08f9624", "indicator--f38cbf58-4dc9-42f0-b633-dd4f38c14280", "indicator--6af33a5e-1851-4a24-b142-95b3c19a753c", "indicator--f66a2976-f7ba-4590-b4f6-480b2cb7c7db", "indicator--28a23076-ed49-41df-bd97-0f789187338e", "indicator--b57fd00e-12f9-4935-a741-cd9470741018", "indicator--2fdce5f5-fbaf-4a00-a93c-d3e0fc2df336", "indicator--479ab558-4e35-42fb-960b-f92b122bef7e", "indicator--1a337010-ffe2-4536-8b54-a77e153e4673", "indicator--c74a417c-2ef9-4c54-bffa-e69f295e80dc", "indicator--d6bc3645-79ca-4bef-989a-632f4b61856a", "indicator--f2cf4012-7f51-47b8-8976-d6c931101dbc", "indicator--9b134a23-61cf-4633-895a-cc09154624d6", "indicator--2cd5685c-5708-491e-8d5a-6b26bbd90c94", "indicator--937d7b4a-ddd8-4b9e-8047-bd4deb44a47c", "indicator--e9389b52-9b06-4080-9e21-3df727a5e247", "indicator--decc2e97-2ba3-448b-9325-f885a48151d3", "indicator--47a5cb50-c7b4-4192-b671-f166b6dfd255", "indicator--5078f198-2e77-41bf-86de-564f669710e3", "indicator--95be3a13-5a8a-4311-8547-3f899e2c28f0", "indicator--d3feca1d-8dfe-421d-b3ed-6b60db5f787a", "indicator--30fc763f-d763-4452-9414-429ff9e95eec", "indicator--ef4ec792-7fa2-46d3-a8ee-35dc3450d3b0", "indicator--d51685b3-4151-469f-8f0f-7da9457da651", "indicator--77228d60-2680-4f32-a16b-a6d343ff5469", "indicator--7a61c71b-0041-42ce-aaec-1c90360f522c", "indicator--d20efaf2-a6e8-4859-93ea-e94b645f216a", "indicator--f98dacbf-aff2-47f4-91a7-5bbcbfd23684", "indicator--ad2f74cf-97be-4ffe-9adc-1db6c9ab1af5", "indicator--1b5d6efd-4647-4bf5-9332-db558aee6642", "indicator--10f7ded0-ab82-44b3-a06b-7547f1af40eb", "indicator--219b8812-4562-440e-8e6e-6c2fd62d6107", "indicator--9862f576-59a9-41fe-8bf4-f130327184bc", "indicator--284392d3-6bc5-4d62-8246-53fc9d9d6184", "indicator--3e675c34-d49d-4d3a-a25c-667703b7aba1", "indicator--8e2ba5e5-cc72-4f6d-9644-1f627cfb2f94", "indicator--b70a6930-ad0b-4530-adc0-8d494e41d3ce", "indicator--a02c8be8-88bc-429b-b736-f6b7db2dc102", "indicator--57e872eb-ee85-4f67-94fa-f65093c41d6d", "indicator--1065e197-ee49-4486-a392-dd929b214d91", "indicator--dd542487-0149-4d6d-8543-c9d2d5968cbc", "indicator--c0df344b-5dd8-4431-9acc-bc36bed5160e", "indicator--ddd5bed8-4716-46b6-9e9b-bd0a6de0c4f3", "indicator--fa607a04-4a9b-4461-8603-0eabacba54d0", "indicator--3448f970-657e-4739-8f83-966795216362", "indicator--f43b5321-d16b-43a2-a6a9-515333fd8ee2", "indicator--9cc85129-fa60-452c-9fe2-5d5b27351a62", "indicator--549b9064-a0cd-4f1e-82a5-7c74beb3bff6", "indicator--0222ee52-39ee-46c5-b06b-f47d4c9f373e", "indicator--cf3db5d1-82d5-4938-b0f0-e1bccd1f4be0", "indicator--9e55f8e9-4b15-4155-ac68-4b5f846b8ffa", "indicator--8bf9c9e5-b6c4-4071-9a3e-2c431fab31be", "indicator--20d5e624-c8d8-4d4e-bf4e-f106f523cf78", "indicator--6493d386-8b6f-4aa6-acd9-77da3184860a", "indicator--c37d87b3-97b4-4847-b59b-733a30113a03", "indicator--1cbdc81b-ade6-4973-ba13-79dbc7686459", "indicator--c7a47b05-18ed-41f6-a58b-ca5cb7b3e3fa", "indicator--272eef38-48d3-4526-99fd-b7409d29f917", "indicator--bb681479-3fc2-434c-8309-4df21a9de440", "indicator--61a11177-0578-472b-ba9a-a705373d04a7", "indicator--b3b70788-0a68-4ab6-8153-ac72265c72fe", "indicator--386a63e9-f869-49b6-86e1-f8003d78d8ca", "indicator--550b75e5-b7b2-4065-997e-16ac7d26b383", "indicator--21ce982c-707d-4870-8610-9679295d65d6", "indicator--99827115-4925-4002-879a-1eb501c118dc", "indicator--7cb0dafd-09a5-4b93-b76f-408c055462d0", "indicator--7329f9cd-b701-4837-8f2d-71cc0fd0c919", "indicator--a4b7d436-b548-4e14-8d4c-baef1de2a0bc", "indicator--9d1cdc40-55c7-48f9-9f97-55d3e0c90c66", "indicator--ed32a3f6-710a-4f6a-9271-560b42ab044b", "indicator--d987b0be-afc9-4333-99b8-66be045071ea", "indicator--34a6e966-850c-4077-893c-27d42447fdc9", "indicator--c8c23e79-7a03-4b0a-830a-137b0e319a10", "indicator--cb493d61-1ac6-4e1f-81b5-873b5bc9e0dd", "indicator--1e02ab43-aa89-4e1b-8e70-a402e8a268d4", "indicator--390b81a7-1b32-4656-b905-ee5aad457f9b", "indicator--13003c66-c09a-4517-8874-ca1ea9ba94da", "indicator--11626be9-9cc7-4995-a013-b9dbbcb4347b", "indicator--effff7db-ba7d-475a-b86b-d54c1020e938", "indicator--57938035-58f0-4648-873e-b3f3ee605b19", "indicator--7ec186a6-7a74-4ab2-a524-0f3fd97255d3", "indicator--e74bd53c-4709-4c20-b270-fa6409530221", "indicator--47b0bab8-d6c0-49ec-bb3e-9e2d9a10b3e3", "indicator--053f87bd-aa8c-4a98-b3f6-f6522c4f6e9b", "indicator--aabb5c7b-0321-4cea-8cad-a8ace08b18a1", "indicator--a4d6807b-a418-4093-8ddc-25eaae073d88", "indicator--9ac300f4-dadd-4ef2-a008-9760a7931f34", "indicator--67ef53c9-efc0-4465-89ca-3dac62144d92", "indicator--cf24a234-3d97-4ac8-b283-e8a1d6c5e8ae", "indicator--9d77d04c-e97f-4e9b-8d1b-af6caba43788", "indicator--1e34e7c5-4062-4925-a3f1-07b70d2dca46", "indicator--92d39fa4-877d-488a-aeea-5462e6e6c703", "indicator--f51918d7-4f28-4a2a-b0e7-8d82ca6ef0d4", "indicator--e1a9b13a-1e19-44af-9065-81755290df1f", "indicator--27c65ab4-9a1a-42b2-aaa5-e66213511a02", "indicator--92d19859-3cf7-45ac-8219-e8c562935f88", "indicator--0b3dce7b-630b-4e91-abfc-3af6f21143d2", "indicator--60a7101e-f569-4706-850f-2a2d6a8d54bb", "indicator--920f6290-0b4c-46aa-8f98-a3bdce192a98", "indicator--8f36ab67-bb2f-4ea5-9dc1-e37d166b2e10", "indicator--3282a638-3e7a-42d1-9d7b-2fd3bb8a7545", "indicator--8fa9315c-0db8-4d9f-9961-8a8fd11db128", "indicator--53eded09-c88e-4b13-92fd-2f200361912c", "indicator--e7902f06-dbbe-4b99-a38c-6ef821957fdb", "indicator--657f1029-b478-475a-ad8b-8ca171e2c16a", "indicator--626528a0-5bf1-41a3-b71f-9d7a07383150", "indicator--0b3473d3-769c-4a91-918c-44ca8639cba3", "indicator--eef3f11c-c271-4d94-b8ed-0cc45ecf852e", "indicator--2eb4224f-b561-4899-94b0-5d625251c675", "indicator--a3856b56-4362-468a-a669-9d9a6a6ede86", "indicator--08bd00d2-181a-4058-91f7-03f1496114a0", "indicator--aab76911-006e-4946-822b-3e283d562ff8", "indicator--6b939ed8-72d6-482c-aea9-fedaff2e2731", "indicator--df6add18-2bb3-48fa-883b-c2edb0ddcfe7", "indicator--c7ee318c-257c-43f6-b14f-0a613a6a75ab", "indicator--61164f04-ad4d-4d6f-ab7e-194f869b29af", "indicator--314e96ac-8c73-4df3-9170-0022be8dd673", "indicator--6deff517-797b-4de3-980a-5eeefd37f17c", "indicator--391ea1b5-8f1c-4b30-a291-2cdaec48ed56", "indicator--19bd5c1a-3e77-4624-913d-47d153ccfa02", "indicator--cdd43ce4-9786-41bb-b8d3-2270d7944e69", "indicator--6282d2b1-2319-4312-b4db-9a355767e51d", "indicator--89cf3954-aad6-4436-a281-cc99e315afdb", "indicator--c816b181-98f0-4dd4-8016-3aba3ee293b7", "indicator--70f511f5-ceba-4d5c-bf76-278503106f87", "indicator--966142c7-e5ed-48fe-90f1-94de5d18f9b5", "indicator--7aef4e02-2a37-4008-92b9-a49b8fc5bc28", "indicator--9f0f0754-7348-4e3d-8b86-b8b5a7863ac4", "indicator--76e34e5d-e08b-4676-b138-4152880f38df", "indicator--d1335850-774e-41cf-a611-cab2415abab7", "indicator--a3b833fc-7191-496a-8ae4-b1ed8d68313d", "indicator--ca6351cf-1d92-4234-9fb6-2a9d107ba283", "indicator--149135e1-3b03-420d-8be9-9e163c0cde7a", "indicator--76b44a53-fd7c-40da-a27b-4a7caf6e3f19", "indicator--b1dd4139-76b6-481e-b1c2-d71487264b8f", "indicator--39e2659e-4437-4e6c-956e-b9deca50ea46", "indicator--ab6cb006-09eb-4e6b-bd86-63812541d39a", "indicator--88e35723-f834-4132-b1ef-ccd5cb764bf1", "indicator--f5a0aae1-9a2f-47c1-a480-13d122ff14a4", "indicator--b7811f2c-5e2b-44a0-81ec-73a0649a0b10", "indicator--a99e4424-ece2-4036-ae5e-7f3f1a90d905", "indicator--798ca11f-015c-4077-a65e-3f7ae8f901ae", "indicator--bcfd6cf2-aecb-4fab-86db-b22b8266fe2a", "indicator--6bced542-7af8-4700-9488-9776216695f6", "indicator--430de068-3316-4ae4-be50-d15fc050fac0", "indicator--40f55feb-ece3-4f87-a396-56d119b524c6", "indicator--cd846b1f-104d-473b-805a-7c053614c5dd", "indicator--380bcb56-04e0-4011-ad9f-05e60c2d829e", "indicator--7f038e5f-3634-44a1-8917-6a2639d45a44", "indicator--ad8323aa-ca85-4e46-9305-bd6f0fde1664", "indicator--4669b241-1d36-41f4-a340-f9739d777e1c", "indicator--9dd751f0-a335-4cf6-a86f-63b01625cd02", "indicator--7fed2aff-8141-4bb3-ab9c-cb69b370dc2d", "indicator--2e8b7cfb-ba08-474e-90b9-152c3538628d", "indicator--f0e668b1-b08e-4896-bb1e-071b1b91ec38", "indicator--ff57d698-d79e-4d12-9fbf-02039b5fec11", "indicator--c3b2120f-83c0-48a4-923a-ee7dc6c61729", "indicator--d8c20094-8dd4-471c-a116-f65da7edb00d", "indicator--6534b621-6fd6-4dbe-bb43-9fea925ad8d3", "indicator--0dc7b465-9fdd-4566-a09b-a9fe560fdcdf", "indicator--ad40475c-ea52-47e6-a513-40920755e2d3", "indicator--07f267e2-656d-4538-8526-21f2d3e6c084", "indicator--5913c96d-46f3-4402-8afd-620dad7e24be", "indicator--795acb28-09d6-4fae-8152-323722bcf78e", "indicator--e7ecfdb8-1dd4-48f8-8282-cb75b44b8108", "indicator--276a19f9-8925-4570-b739-030611d8ed17", "indicator--b93d86da-ae4d-4c3d-a0e3-73190dcca66c", "indicator--7d4527c4-3a73-4c45-89fc-8a8bcba741bb", "indicator--20a2c3c5-b948-4535-850e-67dc6c8ea15c", "indicator--75f704a9-6baa-4c50-9277-8ac3d6b7e22f", "indicator--c584d69b-78c8-48ad-bf8a-e3777f5860b0", "indicator--4f79f54f-8525-48a0-a8f3-afe35aa47b07", "indicator--1c5d76ec-6661-4d05-a44b-91b9ca23a428", "indicator--6f6e163b-9615-437e-bb69-ef127d3d7367", "indicator--0affc611-5b6c-4019-886b-f11263db9491", "indicator--aff6ffac-ae76-4a9b-9d33-8bb5d1824d38", "indicator--0de65193-4bf2-4e9c-bd77-b2be6ca7d19a", "indicator--8fa2b8d5-f321-464a-91ce-dedce76d9afb", "indicator--d42f245f-a757-4d8a-b569-65d915599636", "indicator--03130b5a-59b9-4352-a8d6-c4cdc2611302", "indicator--91999871-727f-4430-998e-cb6891fabe65", "indicator--6e34b2f1-fb84-4bd5-9768-959573638dda", "indicator--7636ae27-5140-467b-9118-b42f4bebe606", "indicator--6f736225-81b4-4cb7-8120-4f0cd23eeb2c", "indicator--a73f317f-a460-429f-98e4-14213b4aacd0", "indicator--d395d028-03c0-4425-bc99-ca28797a7c01", "indicator--12264109-649c-4621-9bc3-9597b5b27242", "indicator--93c48a34-6f97-4cca-945f-e11ad2680984", "indicator--db4c3ae2-6f7f-4414-82a2-c1447de8b940", "indicator--dd025814-513e-437c-96c3-99dbb4b3ed96", "indicator--a90ee3a4-7e54-43dc-a43b-bed356b3993b", "indicator--238b12fe-eec8-494f-bf64-cb9471cfb5b3", "indicator--51dd71c0-a570-4f03-9e20-b13d5c0aa4ce", "indicator--263b48e2-480c-4601-9b37-7b535f4332fc", "indicator--317bef16-556b-458d-b389-80096018650d", "indicator--0cab3630-76d4-4303-a375-7de2c53c2c08", "indicator--41c74c77-08eb-437a-915e-c4e1aab6682b", "indicator--8c7e9bc4-cb6a-497b-8bab-91a9f6bf96e5", "indicator--620a6995-877a-457c-8104-f0d120b56323", "indicator--fd9115c5-28f2-47e8-83c5-3432ee16ffb6", "indicator--e3c96c70-de34-4a82-9d59-e4d94d6a8bc9", "indicator--b84152da-bd6e-419a-91a5-277fb6a09dc1", "indicator--67e8852c-b465-40fc-904b-42e7a17a0199", "indicator--b1dd173f-95cb-4a19-ba42-28e78337a3ac", "indicator--4815978d-c73a-4514-a409-50f3084bb46f", "indicator--b288ed33-c941-4534-bb54-c593fa55d4c6", "indicator--f613d84a-4fe0-4ede-86e0-c264f368cf28", "indicator--c0ffa374-b025-4122-8ba5-82d64bc7839f", "indicator--0bbbe5a9-c3a5-44d1-902a-65bf4810b9fd", "indicator--8eeb03c1-7ab2-4c77-be24-de2c74d50d32", "indicator--f3a292b1-308c-46bf-9445-5e5968fdd7cd", "indicator--5573a327-ac35-4762-8c02-855cbe75110c", "indicator--bff9b89a-a2e7-4130-97ca-0b5ec9f93657", "indicator--c3b65cc5-553e-47ae-b4ba-f64c9dcc7f6f", "indicator--1ad21e5e-3c66-4724-b039-f56364879a96", "indicator--2e5fb907-7fe7-43dd-b3c7-19f4748f9734", "indicator--f6222e0f-5a8d-41fc-a252-bd072f4a30ae", "indicator--01cb536f-cc68-45a2-ae2e-0375239a97bc", "indicator--7cc9eef7-fcdd-46be-8416-3fdf5f1ecc21", "indicator--9bb55553-21b5-445c-be87-85a989ec56c7", "indicator--4acd11ed-1f1a-47f2-aa16-b7ab9b00ce68", "indicator--718ff6d2-c2d4-4f28-b13c-2d1451a24a45", "indicator--a2226f3c-a496-417a-9812-1c2562eb8d40", "indicator--7665e239-1a1c-4644-b77a-846ed9842571", "indicator--03c1d3b1-6fba-466c-95ea-bb508a27afd2", "indicator--c370463d-5830-4f5a-8874-15bf98dd7b0a", "indicator--52d97ea4-b0d2-47df-a0ae-f7798bbc4408", "indicator--afdff287-f41d-4f59-ae4e-9d74ea5255f9", "indicator--389fa4a7-4ff7-47ff-83f9-583ff396598d", "indicator--d0bc9186-84c7-41a6-a19e-21f440357fd6", "indicator--1507a536-9108-43d6-b04f-9c251d0ffcd8", "indicator--11eace00-bd5b-46b9-b1c0-ffa2f2046810", "indicator--b2c637d5-8a79-4221-a937-3f790c3db6d5", "indicator--c779913f-0a7a-4e90-a905-101e154fcb02", "indicator--4ffc1072-f1bc-46fa-854d-7f994a805fa9", "indicator--88ffb065-25a4-47cb-9d3f-bc7a3fa5fb93", "indicator--82b40305-852e-4abd-82a9-978caa58bcb7", "indicator--1d2a4e54-5822-4951-a252-3fdab47ad462", "indicator--9c41ea9c-081b-43fa-b906-bca490119045", "indicator--61839a62-0a63-4e7a-94d8-4d8e0841faea", "indicator--6a298461-bd63-4b6b-8ad8-33a865c5753a", "indicator--ca0d13c2-e994-495f-a098-435c2f75808b", "indicator--42762cc8-e4f9-467b-895b-c251b89df94a", "indicator--4fc370ae-6b55-4610-a77d-bdbf457d1d64", "indicator--821bf446-6f8b-4ccc-ad37-1da9e251f1fc", "indicator--fcb9f089-c9dd-4bd2-95d2-3134815e67d9", "indicator--41210b88-b7b3-4fe3-9a29-4e3073a6057b", "indicator--e3ccea86-de2d-445c-ab8a-70ea1d9e088f", "indicator--3798eaa7-3a17-4402-a89f-243fb3b04a1c", "indicator--3d356212-a16d-488f-b2a4-febad2093cd2", "indicator--19835d2d-e6e0-40ec-8d4b-9af6fe190872", "indicator--dab78343-4ced-4389-ad61-f8faedce1580", "indicator--c41881c3-7c17-4951-a500-b9b3307b8fed", "indicator--897c21c3-7cf4-4083-afa3-7da202d06a70", "indicator--b4a772f6-6eca-4a56-9ae1-aaab13699f34", "indicator--18426f91-7f79-4a48-84c2-71761fe321ce", "indicator--b97475b8-56ef-4feb-8fc0-fb0907d8e1ac", "indicator--2698deec-6112-490c-84d1-6e1b7e61c252", "indicator--1e15a247-a11e-4000-afdb-d8df647ff651", "indicator--2899c781-9ee0-4bd7-ade9-d1ba41bb7962", "indicator--e6319aab-4314-4005-b38e-e906d76f4a79", "indicator--5a07e476-08d5-4543-8e2c-f037f9bb52e0", "indicator--1bc667e0-5da2-44a6-adbe-2202d8584e17", "indicator--27d70467-1156-4463-8020-301a694979c9", "indicator--9431c0f3-3875-47fe-9987-232e4514500d", "indicator--0ae0b87f-0a1d-47ba-b262-5dce7f531b5f", "indicator--f89c38f8-68d1-465d-b21c-4af26d186e74", "indicator--19c054d9-a047-49b1-bdd3-1e62e8a95293", "indicator--71de403f-edb5-4893-b2ba-57f02ecda141", "indicator--5ccb560e-67cf-4f5b-9301-8421d774d5d8", "indicator--5ae5b083-ea81-4d90-8efb-5b039dc2fe5f", "indicator--d7e3a6f8-064e-493d-a7d3-dab9eb626e9d", "indicator--7955c429-8cd7-4fee-b940-a84937348419", "indicator--7be8ccd9-8904-459e-81df-f7a32baa401f", "indicator--27550417-edcc-47b1-b0b0-8b558419e63b", "indicator--538b3159-39e6-4274-863f-7063175b354c", "indicator--41b926b5-0a5b-483d-b384-1769db8b87cb", "indicator--3bea477d-a93e-46d8-bd7c-1699ad0663d2", "indicator--bdb19c7a-d088-4154-9f96-9b43cae74484", "indicator--8696100c-547c-4c03-bafe-05af4c8be3af", "indicator--9577fece-5aea-4c92-a0b9-f4e7342ceca8", "indicator--1c78a996-d2d8-48b3-be9f-9f8630a649e9", "indicator--03156b31-cb8f-4709-87fe-9111ee257f68", "indicator--9ac865f3-73b9-4b37-ac98-f9b29ecf07b3", "indicator--f341edda-b14c-4534-9527-53e55446a020", "indicator--ba333b56-8a8b-4eac-8ca4-c95a049e7910", "indicator--e0e562b7-ae9a-4794-9795-41fcf9d24f67", "indicator--c3a4fa0d-d96a-497f-81df-0b39079beae9", "indicator--e721b62d-17bd-46cc-9cbe-e17f9ddca0c7", "indicator--60cc4322-eb87-480e-b1ef-ea73a35fdfe0", "indicator--0ea28b1f-f09a-459e-8ac1-0e3bc8ffbf61", "indicator--4b5764a7-99a7-417a-ad9d-70e52e588cac", "indicator--59e1cd8d-f7e2-46de-b144-ab8cd32843ca", "indicator--71db76ef-a04e-4174-b096-66cba6333254", "indicator--dc1dd5aa-ef9c-4f24-91dd-21c8a3ebcb30", "indicator--e31a4392-fb5f-4adb-8a06-6418b1cee6a9", "indicator--86a156b2-d0f2-4d0c-880a-b750a3b11085", "indicator--88ca57b3-fd3b-41a3-b0d8-9931f2b04aee", "indicator--66436832-a2b9-47a4-9782-b8d94dde2b7f", "indicator--58ffdcf7-49af-4a33-8f86-a42723dc1ade", "indicator--aaa5107d-cd17-4d95-9444-091cc2f75567", "indicator--4fd45c24-43e1-4e0f-894f-37c1ca68889f", "indicator--7b71d059-28ee-45af-82ce-d5848c069f29", "indicator--708a2beb-5de3-4f18-985f-012413c9e0bc", "indicator--fbaab5ee-f7c5-45d0-97c6-ae935779dffa", "indicator--15e56fc0-b715-4970-85ca-9a8641054e11", "indicator--7934bdc3-8e94-41bd-ae40-8b2257f76d6b", "indicator--d34fde51-0288-477f-b5fc-ba3649659c60", "indicator--623cc92b-df0a-462c-95b1-42a6e06cfa73", "indicator--78055e5a-5e27-42d4-af15-6540a798f5c0", "indicator--a0ecf622-04fb-44bf-891b-abec62ca7f00", "indicator--48021a9c-6819-4a5e-a11d-bf494a475712", "indicator--52b3d25e-6baf-47f4-8868-30317bb4a052", "indicator--bdf2b0ac-b92e-483b-868f-c18b62e4faa5", "indicator--85637729-bf94-46e5-9137-291e872b7672", "indicator--39c86d90-b52f-4f74-8da9-e1d24c46961e", "indicator--e0da3c8a-535b-4dc0-b5df-1b10e1c0f664", "indicator--e6fd4b08-5b72-43f7-9533-62542d590c81", "indicator--d27d7573-c862-4689-8d8a-a1824158d9e7", "indicator--332bce73-7981-402a-84c6-baf6fb601eb2", "indicator--a8808a7e-1e71-4d8b-a949-0c47690d6294", "indicator--374271fd-1697-4813-9138-33d98d1487c0", "indicator--9a199329-9325-4f59-aaaa-0487d5f37e8e", "indicator--db9fdacc-7db5-4356-a883-b5f3e2d25b7a", "indicator--241b7662-0e39-4ab6-9825-b277c9e631c6", "indicator--b7997357-825d-44de-8bd7-86763b39e3a4", "indicator--7704128d-c298-4287-8992-293e1d25ee5a", "indicator--84ae757f-1ab6-4cc1-8114-75d871916be5", "indicator--b3c01015-0718-4102-b417-94504990801b", "indicator--e635102f-2db2-4a62-8c41-28016de96efa", "indicator--ce350ea3-a618-42ad-ad52-01653bade662", "indicator--6406d65c-4f97-4434-951b-affdbf3ebe0c", "indicator--aaf55a12-8948-459a-96ca-3e40aa9a3ce3", "indicator--4d7443b8-c720-4f63-bff7-28a4f237a18b", "indicator--68f3d0f5-13ca-4f04-a252-d6dd80760741", "indicator--b579279a-040b-4222-b26d-a3fea95cbd28", "indicator--30d9be6b-369d-4e86-b481-7b6e2578c116", "indicator--473d7cd0-fa95-4531-aa4c-8487dfd5c08a", "indicator--0172d28b-689c-4641-bfa1-79be85f24f0c", "indicator--71362d72-a2bf-4b99-92d4-934c7ac40413", "indicator--afd879cc-5e97-447c-ac41-2a6d3cc5ac7c", "indicator--0940247c-b230-4c25-bb43-94f209126040", "indicator--6c133253-0617-48ee-8b0f-b214b099cdd0", "indicator--40def4c7-76c4-4b6c-805f-397f8e7dacdc", "indicator--e2560cac-f564-4b1b-af96-117f938cae1b", "indicator--2cc90704-c440-470a-b6fe-f45dc4485d9b", "indicator--c545a8f6-b93d-4025-99bf-19cb6716537d", "indicator--d89846b3-6013-4ad7-8c99-afd5b02091bc", "indicator--02fa5a76-5f48-4232-84fb-5c0ffcbb4dbe", "indicator--288f78be-9e0b-4e5e-a22c-d6b471bf2f3b", "indicator--a8e21138-0097-4787-8bc2-0356e80aab12", "indicator--a5a6fa78-3a21-4f65-8ea4-bdfc747b3a88", "indicator--b18263c8-0659-4a1b-a319-a1d59126c446", "indicator--58056498-d464-4270-b23f-a7fb80523707", "indicator--8437a450-5e87-4576-b1a2-eab40175bd03", "indicator--b11b4f11-f9a8-4b5d-a23c-fcb9aca64474", "indicator--f96e4f18-3f5c-4def-a672-db16646b0834", "indicator--3835fc3e-12d2-4864-b2c5-0a295ace50e1", "indicator--459b78ac-3203-4f03-b8ac-85b19f26f0a2", "indicator--3b90adf2-92cf-4376-b5af-3057c101a425", "indicator--1997e658-1ea9-45c0-862c-40e9e461a915", "indicator--6dacecea-e0be-48ce-99dc-5b20294edfd0", "indicator--df65bf7a-eb50-4f41-abd1-2e1c612ae9e0", "indicator--4f9b0bf5-685a-41fe-a3bc-ebc718a2688e", "indicator--0a9006d9-a6bc-4b28-9b3c-be1488332262", "indicator--c04f9e75-fa11-4cc6-9dd8-e080ea70d8cd", "indicator--ad766d6f-6e54-4f84-94f4-c6f82d971164", "indicator--efb1c290-217a-4718-9de4-c83072e1606d", "indicator--5b761e88-47cb-4878-ac2d-e3a7538cb1d8", "indicator--bc0ca394-506b-4fc1-9cc7-e4d5799cc7d3", "indicator--f1a6a850-e15e-473b-8acb-fc6f443dd57a", "indicator--2829035f-01aa-4c3f-9ba6-8004b78a2001", "indicator--508723a7-b599-4cb5-86f0-55bfd8158033", "indicator--8c42db7d-7e77-426b-934f-718656dee96c", "indicator--b12fc48d-ca15-4c16-ad8f-91049733b910", "indicator--efbdc953-15d9-44d7-bc6d-8f459988670f", "indicator--13922580-6d42-4cd8-98ab-a64c756c475a", "indicator--63efdec3-0ed7-41b6-89ac-5572ce624ad1", "indicator--a3f48957-7f3e-4aed-ae6b-63dbcbfe1d47", "indicator--dd769056-5f03-49e6-83ee-f0f9b621b52a", "indicator--a8d9598e-e58b-48e8-a7a7-7c19eca27e0b", "indicator--1ffb4101-81a9-411d-9c29-923052e590fa", "indicator--a338747c-22b3-41c5-86c9-d6e6987724f7", "indicator--42f6913a-0b06-494d-8b36-e594a7b1f39d", "indicator--3d5dc7ed-ed5e-47b5-9b10-2de5ff1cfc24", "indicator--bb45d084-366e-4543-abcf-657305e0913f", "indicator--8d1b87dc-c091-47ac-ac98-9b46e21c2800", "indicator--ec78f66b-6456-46a6-aa73-26062a3ca5d7", "indicator--10fdac48-548a-4357-b059-a5c7b51a339c", "indicator--5502e851-6384-4c23-bb63-c6d97d227cfb", "indicator--c4f39b2d-947c-4402-b50b-cf0655ba54f8", "indicator--d41ddc8e-b4a2-4f21-bd0a-1a45a5ce7b86", "indicator--03f4f9e1-79e5-4c8a-b174-4912ce3f6fc5", "indicator--c1600958-ea57-45b2-bb00-85ec567d0174", "indicator--8b5cbced-c0f6-4206-855c-5b5e179fb331", "indicator--1d522b3a-06f9-42d3-8177-e0bca4b38f3a", "indicator--ebc3eee4-b56e-41fc-af87-6920e535ee10", "indicator--d5a34f3d-9279-4668-bcf0-37f30c578e3c", "indicator--ba2784a6-8751-4504-8acd-854ee9a9b3f7", "indicator--ee1def04-336e-44b7-a2ed-3935cec45628", "indicator--2a9acc4a-d2bd-4658-a39b-7f659d762945", "indicator--b52ef087-2ea2-4020-9562-47c400abbb9c", "indicator--2565e708-5f75-42d7-a6d4-a7724c2f273e", "indicator--3f3284fe-d7d7-4a3c-b8dc-865b107d09b5", "indicator--a19ad327-2cda-4bbc-b793-0c8226356fdd", "indicator--999cca5f-ec96-4722-b76a-f257402bb9e6", "indicator--d8d95011-ce41-48ab-bc8f-c3ace6a79d00", "indicator--3201f079-ead1-457c-85ca-6ce9c1cbd3f4", "indicator--30f7641f-e2be-4360-917f-84e45a353834", "indicator--2b015968-d63a-4f3d-81ad-ce2c3f46823c", "indicator--24cb0af1-9f5c-4838-b243-a823978bde6c", "indicator--db990c01-b435-4049-adcc-169c2d07e6bb", "indicator--a6d7f619-15d7-4c77-9a18-e4da35294b3c", "indicator--73c20070-0611-4c5a-a02a-bbdd772428ef", "indicator--8a6ebc4e-09fa-47db-a0c6-a345496566be", "indicator--64dc29f7-5f8b-4b26-b205-931a922f9edf", "indicator--fd523c6a-e24c-46ee-b3ec-4b480f21b1a4", "indicator--14c26598-ec2d-495b-bab6-aa3cd8b00632", "indicator--3dd2c46c-96df-4c15-bd2d-20f21d7491ae", "indicator--c6faa988-1add-4b3e-a296-9b81f925e8d2", "indicator--89ffc5d1-57f4-4c6b-b945-c9d4cb574f1a", "indicator--76acf0ca-467d-40ae-b7aa-77604f135570", "indicator--5919228e-2878-4602-89ab-222b1795e386", "indicator--1bb96ec0-fe3e-474a-b18b-33ab62795620", "indicator--ec1bcc8e-31fc-4ac3-9225-ff57cce49c54", "indicator--4ac95f57-6335-41d1-a23f-0912e21f3846", "indicator--0154c545-499b-49af-a3c5-93f9be9a7b90", "indicator--f3398b1d-2950-424b-9088-d85a1830f97b", "indicator--e3a86fe1-23de-4cd4-b644-6c2f5f787591", "indicator--e3c0e5a6-91a0-4a09-870c-16b9b80f4b7d", "indicator--70a7f297-9920-4172-84bf-412ac7261ea0", "indicator--c417f5fc-e708-420e-8681-aa5901323bd8", "indicator--7e691746-c0a6-4f83-ac86-8e9cf39079e3", "indicator--b404adc9-1dec-4c91-893b-75f537e8aeb5", "indicator--26a58503-d586-4084-84f1-c8d9644da04a", "indicator--61fb11eb-c7c7-4bac-9d23-7a9a314a84c9", "indicator--f2967e05-9ac7-481d-9c55-e559adc303cc", "indicator--13b71f2f-f008-45bd-bb89-8a4bda661bde", "indicator--3a77ade1-30d5-4abc-9885-9ffff795beb3", "indicator--0fc9b186-e185-45fa-8996-5d6f89819698", "indicator--2f705fb3-ff34-460b-a44b-c123327266ef", "indicator--1fb2d776-d42a-4abb-8a9a-6eeeca38d1e0", "indicator--7cc6f61f-e881-4802-a706-0e5bd10885c8", "indicator--028316aa-4483-4a7d-9637-a47b127d6e07", "indicator--81b300dd-6d91-4093-8ae8-7348ade50316", "indicator--778eb521-f535-4026-a95a-a72ba8e14ee9", "indicator--73b61cc0-6c42-4236-89c8-d73542a8e2c4", "indicator--4c4b3969-30f3-4f55-ae64-31b04a2e0c19", "indicator--481b199d-bf64-450d-af00-7c2289f0c63f", "indicator--238b77d6-bfcd-40e0-b84b-365a2c7bc305", "indicator--3956431f-b28d-45fe-8d75-8af5d2a491b9", "indicator--6639ba7b-97af-4f3b-ae20-c3f2fe1cdc5d", "indicator--1b0a001a-9935-4c34-80ac-1e48229a4c04", "indicator--6bed1d53-99f6-44b2-9c1e-c1d27df4d77f", "indicator--8fe35dd1-9fe7-4ae7-b410-36cfea93d139", "indicator--3ed69b63-16d8-4763-a79b-fbc6c806a45b", "indicator--ef90c213-9496-4137-a3c2-7b643c92d4ae", "indicator--9d1ef891-5df4-42e6-84fc-476ffd238561", "indicator--29718ac0-b809-4da9-a85a-26a3b586ca61", "indicator--0d3ed526-4f45-433c-81ed-7d0b69b06327", "indicator--a8b6df2f-f7f8-4071-bdd6-8b2603ac915d", "indicator--46902d84-cbca-4177-8b07-3708adcc2ea2", "indicator--65631712-fab0-4830-9972-49536b4ee2b4", "indicator--d88dc5be-7c3a-44b4-82fa-176e6bc42bc0", "indicator--8a3c32dd-f12b-4eaf-82f9-58923cb7c777", "indicator--9ffbae14-5475-48d0-8e10-b660414a5f9d", "indicator--8015a79f-5b01-4682-83ee-87aa2e612fea", "indicator--8936cb0b-0ee5-48f0-bc11-a0598f1cf330", "indicator--a571691e-407c-4985-b537-24ead94c38ef", "indicator--0071c8ac-e9ef-43d6-9615-d221321173a0", "indicator--72f4de75-42b3-400c-b5f4-ac66d8eb73fc", "indicator--1627367b-2cb1-47db-87b1-87aa103fd9b7", "indicator--84deb8a9-baeb-4934-abb3-8448f7ae3ab4", "indicator--368b2ef2-845a-4f46-9a49-d9c4839904d4", "indicator--1b149ac4-da13-485f-b4eb-62590180e343", "indicator--48b90635-e465-424a-a883-cd502786f39e", "indicator--01b9e8d4-b11c-431a-9e8f-ae047a47a1a6", "indicator--760f2950-8563-46cc-8278-fbfdc2e8672f", "indicator--408ed19c-3d5d-42f9-86f1-401231903229", "indicator--d57def00-2794-4626-96a0-ca35966bcb69", "indicator--e74f4f34-1760-46b9-8350-5fbe3d620f2d", "indicator--dd4f7ce8-dd66-47e0-8cad-31d9358ab8bd", "indicator--b9af5048-14bd-4101-8e30-b6ae7ade963d", "indicator--fd958ef8-1ab5-44ea-9354-d3467005116c", "indicator--d6ff7414-2f9a-4058-90e2-e89a685df757", "relationship--dd31f6fa-bbad-4548-b398-d50a3f42b5bb", "relationship--70840c83-3235-4691-8500-42047c37666a", "relationship--584fdf1d-1e1a-4e96-b704-10684b27fb3c", "relationship--84ee6700-fa02-46ab-8dcd-f5614606dd32", "relationship--d9c2fe5d-7474-49ae-886e-62dc32804d81", "relationship--4054fe7c-bc22-4713-8844-f60c33c89085", "indicator--0812a873-c6b2-45f5-be75-cab01c726523", "indicator--0e7cc1ea-62df-4955-92f0-8b0cf04490c2", "indicator--1bbb66bd-b302-4551-b719-3c143083d74c", "indicator--adc183bd-4bfa-42f4-82ca-dd7d2a8d6c45", "indicator--1ca12e56-27b6-4086-9340-8a69956cd191", "indicator--c2dda56d-b0f7-4d05-8ed5-07df80455175", "indicator--b9fd2972-0c89-4340-b4bc-3893d0a3925a", "indicator--e02f4f1a-741d-492c-b3b9-b0ebe1c0e8ab", "indicator--31549610-c93b-40bd-846c-cecf6ce9405f", "indicator--61a8e368-bcac-4cad-a218-b345165288f3", "indicator--6c12c9cd-0a13-4e75-a76e-90c18c056823", "indicator--06b4947a-efcf-4182-9141-26c86887dfab", "indicator--54d0718d-5643-4a10-a2e9-0ad5d4992eab", "indicator--90247768-fa29-4433-881f-3951ebbb82ef", "indicator--6c74ed5d-21cc-4a61-a5af-4396a293e551", "indicator--0bb0c2b5-3aee-4259-b3b9-0e950d9fa81e", "indicator--36cb2434-5d7f-4b97-93a6-d52261b016b8", "indicator--ef1867c7-afa9-43b4-8ad9-9088c6d3085a", "indicator--d10caf74-341b-478a-9ea0-6e2b2446caa9", "indicator--b3fb00a8-5259-4783-9d1a-4f1791551d2d", "indicator--3028dbd0-2d81-4c74-93e0-c3c1ca94fd2a", "indicator--35cd9dec-1320-4345-b3fa-4ca092e63366", "indicator--22053547-e15f-44ca-adc7-b3888a905ffa", "indicator--a1f7b334-0e16-48bf-b20a-dd34e65e4e5c", "indicator--bee41560-a5f6-4b3e-b11b-39a72313c6a5", "indicator--059f90a5-c0a2-4070-adc0-6099570da735", "indicator--4bc3d5d0-d1f6-4b8e-9917-ea95ef3f580e", "indicator--784496f1-4376-46d4-a6ea-8d391cee700b", "indicator--4f47798f-b139-448a-aada-4730e0d89004", "indicator--319b98d7-9df0-4173-9bfc-b107c6ee1a81", "indicator--ad0e0e4a-34d5-4813-baef-cbc0ad125a3a", "indicator--2bf3c937-a457-4b53-a5db-37c37fb4c040", "indicator--79f44424-bb20-4286-ac82-4816a2fa0d03", "indicator--b1bcb9b2-1e22-48b2-8d0a-257dce6f5b3e", "indicator--d6f1b789-e433-4d22-9822-3d9dab81baaa", "indicator--a409010c-0400-4adb-b21f-ccd7d9ea16e4", "indicator--5fe20953-6a00-4ad8-b70d-83b6ed831bde", "indicator--3dd4567c-46de-4203-af29-e9aa1ba930ca", "indicator--6872278e-8d3c-4e64-8f7e-79bccaa35bd1", "indicator--ca28ea5b-5408-46e6-b18c-80845a7ed134", "indicator--8c4d4b89-161f-4b91-bbc1-2d2b3740958a", "indicator--b72ae793-11a1-41e6-8123-c55d857d8b71", "indicator--5929f3ea-a8b6-4899-b466-84ec324b87d1", "indicator--30cc071d-ec17-4946-8c64-d8fe58b128db", "indicator--16b2ffcd-73a3-4dd9-8699-868eedd104bd", "indicator--0fee1485-c735-46f3-a7a3-95147418b434", "indicator--16120e76-6f6c-4ba2-90d6-59017d9ff547", "indicator--263a5c82-06d5-4420-bf84-97bd7e2fce2e", "indicator--52f3ddb5-9136-4d39-bcdf-25054ee15648", "indicator--d4de7b6b-6850-4e0c-9a52-615190db00e6", "indicator--228612a9-261e-4800-bf34-36ac5c34b4e6", "indicator--c63386da-3881-4663-849c-a9a5a4717aa4", "indicator--db0ce43c-0ea6-4ec5-869c-408bef8bc77e", "indicator--64677ba4-e0a3-4945-89c8-4c7df17209fd", "indicator--1fdd4349-b2e5-4062-b948-5eedaaa17db0", "indicator--a924651f-1808-4aaa-891f-55a532d72473", "indicator--f77e1cc9-7b10-4035-a3c3-70ca8468214b", "indicator--89156838-70d1-477c-81ce-344a282de9d8", "indicator--2e794773-56a2-43a0-8dfa-48483463d81e", "indicator--de11ce64-a071-440e-aa9a-c0e552fc0e67", "indicator--cb3959c4-4100-4c5b-9e6b-ce8643157873", "indicator--82a2c870-1e70-4c84-9096-4769ecc62f32", "indicator--cf3f7b53-342f-4882-9da2-4d02516a9b32", "indicator--8e074d95-0299-436d-8475-419a297fe431", "indicator--1b8d5673-6e54-4d88-a1c3-57dc27c5f611", "indicator--71ff0f9d-5339-41b4-aa2d-3677cec5a0f2", "indicator--d757dc1f-eb4d-4e1f-ab49-888e88e42089", "indicator--17a80e7d-3f0e-422c-b245-33d6036b0861", "indicator--1ab11491-9647-4fb8-bd4a-c79eb0f9f34a", "indicator--599ff886-95a8-42a3-9a61-50eb876a4923", "indicator--d0c5bd32-a0e6-4765-8ec8-f1ebc4e4a40c", "indicator--fb442c93-a6ea-4819-8028-3d3e771ce596", "indicator--56eadbc6-b6e4-4a0a-8c34-c941d26ce62b", "indicator--aadab1e8-2493-4623-9c99-d50e69832bc6", "indicator--75f3b04f-e686-4061-a401-3749e0047807", "indicator--1be28030-1379-49d7-a993-72ba05a0f07d", "indicator--df2781fc-387f-4efb-bfab-3d735dc00074", "indicator--2d3b5e7e-2b2b-4fbf-b191-30bd9d958861", "indicator--92a1dc32-6ea4-47ee-9286-83badfbc2076", "indicator--c46d597e-df39-4c65-8492-0822d9d32d94", "indicator--1b6345fd-c8b7-4572-9b2d-0c785f420591", "indicator--692c3e4a-3a78-4006-a9eb-f4431ba0d4a6", "indicator--26742653-d153-4153-8e8e-b141efa4f2c7", "indicator--9851895f-7c7e-434a-a39b-1339bc35f4b5", "indicator--e8b00c83-1e82-4ff1-a135-5693ddaf4397", "indicator--cbb0132f-95c4-4d9c-abc9-c3c63c0e7b79", "indicator--725fbd84-7762-408f-9341-a8eebd92e142", "indicator--d88d5421-baa4-446d-9e5c-f54ccb74181b", "indicator--4e924776-88dc-43d0-ac82-33a781a874c5", "indicator--24a48479-9f31-452d-912c-911d6ff84ac2", "indicator--723031c7-5455-4357-9404-878aa8323e0e", "indicator--06f1f12b-1df0-4917-b6e8-aef8c9c535c4", "indicator--97dbd2fe-ccab-4884-af17-a01e0e4f11dc", "indicator--e2ed2e4c-62bb-4dbf-b573-7500b8690346", "indicator--7bfec3a6-47fe-41ef-a28a-0e35a644c026", "indicator--a507ccde-e6e7-424c-afc9-de2585c849e2", "indicator--f3430b53-fbd6-4f76-a44b-4f0c0e18b7ec", "indicator--28111d66-4dc8-460c-8cdb-1b1ef02d4d4b", "indicator--f1b5ddcc-c0af-46b5-9a18-f397ea6d2daf", "indicator--1e03bb8f-e2ed-4110-87a5-e48a5ea36656", "indicator--a7e6b31c-a06b-4c16-b6c9-e434a5e89379", "indicator--df3fa7b8-3ac4-4d4e-adb8-97c1650d9406", "indicator--b857cb19-a7ed-4606-a96e-8d84058c4348", "indicator--fe538479-a113-4afa-a8dc-d84be3b175cf", "indicator--77de915f-03fd-4758-b4ec-761cdae88310", "indicator--63ad6566-83b4-4a3f-90c9-a59c3e61278d", "indicator--57707e95-a444-44a6-8348-8e5ec15e59b8", "indicator--606e97a3-c108-4fe7-89c8-0d642069bb8a", "indicator--167b685b-f2ce-46e4-9814-9be280a32d04", "indicator--908b7e37-eebc-4c9e-aa14-8d24b61eb2b4", "indicator--5e1c0725-652a-46c6-ab2d-8300227d7550", "indicator--86705db6-7d84-4000-bd9d-337488299ef4", "indicator--e1df7a5d-1f99-412b-b048-1ded2adb06b1", "indicator--859d2e5c-7e23-431c-93fb-bebb4dc4a01b", "indicator--13125563-99d7-407c-92d5-e9579d732b17", "indicator--3892684d-7afd-45e8-8c85-fb7a7959b0fd", "indicator--4c25caa4-6cf3-480e-8a9e-f996ce4c23f0", "indicator--8d8e065a-0784-4f79-a7a8-288445d573a5", "indicator--9b540787-2e05-4b75-813b-ad65267719dc", "indicator--5b10393d-b629-4530-975e-bc7fbd20b655", "indicator--e163ecef-cfad-44d3-9e49-ee1bb7d285d3", "indicator--2e42f336-e8e4-4958-bd84-d7ba1df07b9c", "indicator--b768f703-43e7-4345-a130-a6af0ca9ebeb", "indicator--ebe58fb1-7e4f-4514-868b-ac34ad95b3ef", "indicator--1246f774-b727-4b6f-8088-da7eaee45dd0", "indicator--747f544d-ad3d-43f2-9b39-235441ae2903", "indicator--d88e27c8-7d6b-47c6-a6e3-d980013a4a4a", "indicator--4461e9c7-144c-4f24-b3aa-1c72532262de", "indicator--6c050860-06bc-45a6-a1d0-0be79b46924a", "indicator--6fd87652-bb55-495e-aa81-98b2831dc654", "indicator--04da5041-e420-4b0c-bb82-d741e4d7453a", "indicator--12b0283d-f19f-451c-95d1-c02629ca7566", "indicator--671162a3-1ad7-4df9-be61-b582ff425644", "indicator--6d0ed322-a094-4ddd-b4aa-35342104511d", "indicator--b72cd4be-034e-458e-a468-2ccce5f9c413", "indicator--5cab1286-ad61-4362-a13f-a422b847f8aa", "indicator--13df4492-276a-4b9d-9ad9-aba97ac01867", "indicator--5df9730e-460a-4f0f-88bf-035410b6ab11", "indicator--c74f3a1d-5aee-4c3e-9b9e-0e67d080cf4b", "indicator--2c2c97c0-50f8-4b68-a607-66f49eae5e64", "indicator--9441253d-1e20-48da-9fc9-36bf35feaba8", "indicator--b65185a4-a806-4a6d-b289-e96c39358371", "indicator--4bcc7cdb-88dc-41af-ae75-3f5143975b23", "indicator--63254365-bd36-48b0-8e27-3bed4c0507dc", "indicator--e1c1f440-5269-43a0-8b80-9bd7808db8b5", "indicator--8559af51-af47-4751-bfb4-9498017591dc", "indicator--d99dbe34-9a1d-4719-8efd-5cdbc0f22cbb", "indicator--cb7da62e-4558-4773-88a8-17aa7fece205", "indicator--2b87e9ff-7c20-4191-b842-f43caed18965", "indicator--d98c9373-a14b-449e-a03d-247c9490ed1d", "indicator--50f5add8-edbd-4570-b2f6-16b0023772bc", "indicator--93504b36-6f4d-4625-ad30-ee7647e3bb65", "indicator--9ac0db8b-7b51-49b1-89d7-2b71929d55a1", "indicator--7308cc54-e6f7-4480-a7ba-df4fe6674746", "indicator--cd37f6c5-2bed-4a0f-987c-1f94c9701838", "indicator--1156de32-f10a-413c-9ebc-12540f975845", "indicator--7aa170b6-2f1f-433c-af3c-536da2797523", "indicator--14234ff1-e177-4083-88b0-960e5d755afb", "indicator--b45784bb-79a5-4bb8-ab19-70fd1639e754", "indicator--83e3b653-a3ca-46b2-88b9-3b2ffec35e7b", "indicator--937b7e96-b104-486d-a34e-db7a3774ca84", "indicator--b709f221-dd98-4653-8b16-0536cf3f649c", "indicator--4cff7a19-80f7-4cb9-835f-d8c5c3a3660d", "indicator--289cd969-2383-45be-b9d8-26f5187b4669", "indicator--15e6c2fa-5c26-4026-b9df-835f1d3a94bf", "indicator--50a30fd0-a970-4c48-8a76-5dddb4f94230", "indicator--54d9f1e3-d927-4f91-9971-f3b380a30630", "indicator--70c0da33-496b-4005-9b97-703144a93c4c", "indicator--d2af3090-9239-4e92-b2ea-a6418ad54dcd", "indicator--0412d5fd-1f63-469f-8c7c-af29b5ea302a", "indicator--a41903b8-fb31-4fa7-ae8c-b5bec90a6124", "indicator--421ab847-2ceb-4b6a-987d-80c092bc59ee", "indicator--dd92c8ae-20df-4878-bd64-9d11cac6addd", "indicator--d0580bdc-598e-403c-9fe4-3d1e953a73cc", "indicator--0ae5084e-0d29-414a-831c-e5d67eefd434", "indicator--f59a1c68-00f7-4b89-8ce3-a9314887f3a6", "indicator--7c936a3b-1d80-4976-b023-e2ef0e741f52", "indicator--0f250c6f-d43a-4568-86da-bd1bbe0be7f6", "indicator--c71693df-aa03-4699-825d-99a3824be107", "indicator--19aacd39-c323-42f2-8840-ec15e1553cbe", "indicator--7073482b-cad1-46f6-914b-4e028cf0c28b", "indicator--f89c6ae7-3195-41bc-96dc-8c6be5a4e538", "indicator--42f71799-7021-4610-85c5-5adc818102b9", "indicator--36c3fa7c-1bfb-4637-a913-a4a609c0ae1c", "indicator--4b98af03-158a-44a4-978c-85a52907dba9", "indicator--4cf1e15c-f10e-4396-8453-f42314dd847f", "indicator--39bc931b-ac47-41e9-99f2-eb36a45e9586", "indicator--3ebec5d0-4c03-49b7-9165-c0baf4cb40d8", "indicator--818b5a31-6dbe-4f30-af33-6ab628a1f9cd", "indicator--6410f8c6-b39d-44d6-9849-f38afe42ea20", "indicator--a74a9837-237a-40b9-bcf6-a356255aebc9", "indicator--1cd85eef-0098-4b1f-b13b-a490198a82bc", "indicator--851f61f4-6e57-4e89-8e8f-c7b1a1f5e146", "indicator--43f9f813-76f3-4f68-8c05-a1cc69a70222", "indicator--fc4d9ee3-23bb-44d3-8da4-a82d1be30009", "indicator--288d9ecc-e012-4729-87e8-c3092c9760e3", "indicator--d0c023df-6fef-449f-a031-cc04b78487ca", "indicator--90eddec7-9f39-443e-81b1-5855c1f0ebf5", "indicator--76470860-63b0-415d-a015-bd7b0e8d6347", "indicator--7b25874a-7d2a-48e0-8e75-f03400c59f04", "indicator--d07f1d50-97c7-4dd8-82bd-45ac4b8ed24e", "indicator--a8365bcf-ca55-4c0b-8e57-be6f4d58c793", "indicator--a05a8624-aaf7-415b-a85a-4bd62e2648bf", "indicator--5a676369-1ac9-40e1-9498-5e980261440f", "indicator--0cc08a56-bbf8-4bc8-9ea8-7d77e6324e0c", "indicator--ece4b025-6a78-4602-87a0-e03507c6a4ad", "indicator--382a94e2-1679-411f-bf6f-e466f04f9c18", "indicator--8d09c4c3-f612-4c2a-8935-16ab39d370f3", "indicator--73a19d06-41ec-4353-85e0-d4691b5ed211", "indicator--d6db6943-c30e-4f1c-b0b4-aff6ecdb33fa", "indicator--f7382963-1ac7-4be1-85be-a83e3af41fa8", "indicator--58894e4c-d8ea-4625-adb7-8543108287de", "indicator--ffb46e66-df80-49f7-bcf4-4ffbb71d3ef8", "indicator--8fe66c8e-5b74-4f5f-a7fa-49f343f5f684", "indicator--357c0ea4-38a5-4733-8f78-d11466d6670d", "indicator--3f5864e3-add2-4e60-95e6-29e022cb56a4", "indicator--1344498d-13b9-4d31-91b6-1ad8a12c9a06", "indicator--e23f9d13-aa2a-4207-a035-4b1d5c186232", "indicator--ba9ac669-d71e-4f00-89ef-1d5404a74870", "indicator--695d5333-558d-4864-be6c-55a1a74cefae", "indicator--4f9b9688-4860-44b7-9bb5-e3639a43984b", "indicator--5c7ecee5-b927-4e66-8539-ff5d1433eec6", "indicator--6ae2ac71-e815-4b81-a517-161e8d1884c8", "indicator--65000580-2709-4980-9373-6c5c6d75c104", "indicator--6972f62e-db50-4cc3-8fdb-8fd9c721fba8", "indicator--96cd5bc5-d2dc-4ae2-9cc8-64e5fd7380c4", "indicator--fc5d1232-690a-4155-872d-41f3ba593696", "indicator--a53392de-0d7c-4b8e-8635-5e0f7325a0bd", "indicator--c72a34a9-3282-440d-babb-89ab0ff909e6", "indicator--0d3427a4-8215-431f-b86f-79a073a2ebdc", "indicator--a0e756c7-bdc3-4634-896d-7cba419b2ec2", "indicator--9b5e9bca-c9da-44a2-a8d7-bbb96cfd6888", "indicator--96cba06b-7179-4531-9bfd-d57aa6dc8464", "indicator--18260245-3b01-4c8f-bc68-b3979b80524c", "indicator--2edf82d2-fb2b-4489-8b94-b080a8b4c4a1", "indicator--3c3a1a45-61f7-450e-8025-9a3b2d57c61f", "indicator--6c957372-bbc1-434b-846d-16b8ef8ff542", "indicator--d30788a8-09c5-44d4-a958-1d9dbd69ec90", "indicator--3ad21c52-04bc-48b0-a25e-7d4ca7e47d78", "indicator--83982e76-1bcc-4c26-8707-2ff6711eb7df", "indicator--115afa46-e4ba-4496-9cf5-cc9f9145adc2", "indicator--85c0a318-85b3-40d7-8064-23dcc1b49eda", "indicator--c8610cc2-059e-4fd7-b240-2e3ba22712ca", "indicator--724f20ec-7d85-41dd-a047-fdc8dd94ddb4", "indicator--af029a67-5ff7-4c7b-bf1e-eb2dcaa9c991", "indicator--1b33f9e8-76ac-4be5-a6e2-2786885a1451", "indicator--1ccdc524-7ab1-4e6e-b107-bc5b6418f79d", "indicator--51f81812-daac-4b8f-a15b-fa8c5d0f608f", "indicator--c96078f0-ee2a-4662-a5c4-710f158d4a6b", "indicator--255ce190-b6f9-46e7-acf5-f1e9a85b015c", "indicator--344589ca-3d12-40bd-9725-486a70ed3bc2", "indicator--bb7fd300-c249-4c11-a3de-567dfc8109a3", "indicator--bcc84d3b-07b1-44c7-b0e0-94037549cfe8", "indicator--f5675464-8749-43d2-b20b-23bc1fd5bfcb", "indicator--0cb7ca09-c4d1-467f-8cde-e279d897d33f", "indicator--534ea2bc-0f2b-4ce8-ba3b-06332098fb3c", "indicator--885c5098-e5c2-4d39-a66d-5faf6bd5e525", "indicator--23dd896e-2161-40af-8c66-39bf295b7396", "indicator--cc99f73f-6e90-4112-9fd2-39026ad8bff7", "indicator--c044d980-4b35-46b6-91c0-f704e4c09284", "indicator--4c04c480-c363-4524-a57e-aace0d788223", "indicator--fb149c57-a4d1-4450-8dd1-69b5fbae2d65", "indicator--2e73c42e-85c3-4934-8c3b-21758ce043af", "indicator--a9a5ed46-cca1-486b-ad54-0dac9020c2ef", "indicator--dc2b8e42-d462-497c-aabe-38b8c8e3e726", "indicator--d4b84b3f-702a-4f16-88a0-089eb9b8f73d", "indicator--e79df854-cd1e-49b9-bbd6-4e445c77f44e", "indicator--290780b5-1a49-4800-aafd-71afd927a4ed", "indicator--d3f08c2b-05cc-44d3-8eca-7d43f85b6517", "indicator--285b2e7d-b875-414f-b6e6-9a368ebe427d", "indicator--97353ff8-d604-4b20-b22f-51f276343589", "indicator--b63662a1-878e-4bd4-8a00-382767787bd7", "indicator--141a98b9-7f84-4996-9f51-30915793b49b", "indicator--84190d5d-2779-4191-8b3f-dff3e1288bf9", "indicator--f33a963b-4d84-49ec-9ada-c28be5237e58", "indicator--d4fc0ba2-3c50-4dfd-96fd-60c5bd4092d2", "indicator--f97ab225-02af-4cfe-a597-e5881d7719f2", "indicator--664e2861-ec47-4290-bbbe-a71a1e842186", "indicator--c1443f4d-a6e8-456a-9d85-4836ebb3be65", "indicator--027a1290-2c25-42c4-89f0-085277601c5f", "indicator--5908db9d-adae-44b4-989a-44d043d2e26a", "indicator--029d032b-34d0-4440-82ec-02a7343f88a4", "indicator--abe6ce6e-c398-4363-96d9-9ecf2f603496", "indicator--93a22658-fd45-4a40-abb8-7013b795ad51", "indicator--94f14049-ccca-4987-9b90-a807c60a5ead", "indicator--b77d4e75-ab00-4204-ac7f-c7f213e5a5f7", "indicator--ed246ad5-1c1c-407f-8c12-caee2910dfa3", "indicator--51b422ee-642e-4cf3-957d-e3f9372cde5f", "indicator--5470015e-43b6-4d09-8421-24804909914a", "indicator--76e531b6-4d67-4fd9-8abf-379166da64f9", "indicator--c1262cd0-380f-40ab-9eeb-28aecbbd1f57", "indicator--bac79102-924a-4b4e-acbb-f929534ac03e", "indicator--968c2854-95e6-4622-9055-d5d35c5ac447", "indicator--9bed8b2e-3c36-42f8-8edf-1ed384023878", "indicator--dc4f98d0-b71b-435d-ad8a-30909182f298", "indicator--e3a6bf8e-23b9-4f82-83fc-dba9d399b61d", "indicator--c1f10ca2-5c43-4226-865a-9c1d9090e38e", "indicator--d82ae391-19ef-4d65-8c7e-32e2d3235510", "indicator--adbccc5c-81ed-4c08-88ac-0c18c991f1f9", "indicator--fefeddac-6ae2-4177-bdc3-9e2190154b79", "indicator--449fbfe6-107d-4b9e-b533-ccd53749cb4f", "indicator--0fc218ac-8550-454f-a0bc-6bb2c1ae62aa", "indicator--1bde1c27-47b4-481d-bf07-9848448f9059", "indicator--fbc108e1-50ae-465a-9d83-f4db7b98ed67", "indicator--14ec1bc5-162f-41f2-acbb-99068ec82169", "indicator--5e7ff31d-1ea8-4e9a-82eb-74b995d109f9", "indicator--09fafe23-4269-4227-b7f8-7efd69a4d333", "indicator--eb53cef7-a8fc-4afd-82cd-0ba9c0bb6150", "indicator--d91de8c8-51a2-4563-8892-b974fc0ed9a0", "indicator--8c3f6c6d-8450-4299-937b-444432f7ab22", "indicator--ccaa2082-17c3-4d26-bf20-f2c135493667", "indicator--a156edb5-c931-49a3-906a-3c1e7423ddda", "indicator--bbd1197b-4729-4fb2-923a-f6a06d43e8c6", "indicator--d41e5ccb-0a66-472d-8e13-2e21f729bc57", "indicator--b2b51af6-f1dd-4d41-8034-797da16ef227", "indicator--261a4d37-0dd8-4167-a38e-1ca39bdd51a4", "indicator--09d06adf-de0c-4d90-ad18-247b526a0923", "indicator--16b16b3f-7e10-45a3-9e13-e5ae34b61790", "indicator--31006281-220d-48b9-b616-c4bd94953be1", "indicator--e304f410-12a1-470b-a321-280b3d275af8", "indicator--2610a03a-32e9-4ad3-b3ee-4de98fd5e16d", "indicator--a9bf217d-43a1-4ec2-9aa0-8f0856988009", "indicator--ebc420ff-66a2-4160-8fdd-8a8768971c79", "indicator--da137f58-6892-46bc-8a64-cd12ff5172c4", "indicator--7853e704-4f79-4680-9e1e-ae79e444c9f4", "indicator--3c9f9a4c-1a1e-470f-a36e-29aaa9e75066", "indicator--6c3d8924-001a-46a8-bd41-983b0da6b436", "indicator--d3f13f6c-5279-4b73-a6ef-6c14ba993bfa", "indicator--7a4c7cb6-9fd0-4aa6-a635-e2643e693788", "indicator--93b6b9b3-be1d-4373-b319-94890b2c8c22", "indicator--a27b38d3-f95e-4e15-9e35-00494e26b8ee", "indicator--59d9d110-37f2-4447-9344-2cb579ce017f", "indicator--397808ef-a280-4fbf-80fd-4ac99f5fa2dd", "indicator--f7571405-3f40-4097-bbb2-6db8f52b65b4", "indicator--ce0c20aa-d84a-491d-9a32-51fa237f1ccf", "indicator--5a4b17ee-975a-4088-9766-8983151c854d", "indicator--f3e000bf-5630-46be-a517-3f66547fea85", "indicator--27e2e7c5-2e62-425a-8110-8558a92e588a", "indicator--afbc3eaa-9586-491f-aa6c-fcd198a628f2", "indicator--7ae8d9e4-3714-4bb5-a4b6-0a6b86a90492", "indicator--ffb20625-3f68-48ec-b713-d557b9266cb1", "indicator--23194056-ffc8-4377-ae4d-a2c5ee224202", "indicator--a6d867ca-c804-45b4-a9c3-ffbc78d0d56c", "indicator--ce89a1cf-22c9-43de-b69e-ed10d56701ce", "indicator--91e69834-652a-4618-9aa5-26c0c587da94", "indicator--7093a9ac-74b3-4665-9473-124cf9cf2f07", "indicator--c2276dfb-d3b6-4946-8cfd-5fa6b80bce42", "indicator--2323dfc0-b725-4799-a0b9-c28f75e24dd2", "indicator--7a05b6a9-eb00-4a40-9703-6f7bd8ccc898", "indicator--e8020a35-1138-4883-8de8-c1e11f0a5b9d", "indicator--895f3248-22bf-4094-bfae-e4163075f8ae", "indicator--806e6296-e15d-485a-939d-ee7052268780", "indicator--e6dc60ba-41dc-4be3-8449-2a4f3a639ffc", "indicator--54e0c8e2-1d07-4af3-b9c4-e22004c0e923", "indicator--68a6082e-a7b4-4902-827d-509b9c3c7d60", "indicator--d29abbb4-c9dd-48b9-8750-e4b48eb2ae9d", "indicator--5187ad50-5bca-419c-9a92-065d75766a37", "indicator--b9ae4eef-dc2f-42c8-82a1-9446f1bdcae4", "indicator--781c3784-b11c-493b-9d2a-1dcdf8858690", "indicator--9a65d658-ee15-48dd-9107-6f9ecbd61b02", "indicator--53a08f1f-ec2d-4150-9c2f-f86ce2939555", "indicator--f69324cd-e12b-4057-b21f-6d015e2de9cd", "indicator--9d9832a3-5fea-4c76-9515-af441a3150c7", "indicator--b36278c9-5d24-46cd-a716-30ee01821c7d", "indicator--cbb9b3e5-7bfb-4380-9e63-aac83f6ec832", "indicator--0fb35392-ba8e-46c7-a259-54c85d3478a4", "indicator--07827e6e-69fe-470e-bc2e-dfc5aa01758f", "indicator--058a754a-4c90-451e-8925-741742846fef", "indicator--14d84639-d99c-458d-892d-60830dbd17c3", "indicator--e3635188-3a13-4627-b3fe-4bca79eb00a5", "indicator--7fee67c4-f2fc-4e0c-b25b-d9ca0b7ca448", "indicator--a1ce7865-4eaf-4fe6-92d1-c710aa2b651e", "indicator--7422bb59-6046-41b1-b0f5-12e8706f9003", "indicator--c5562a31-e5c3-4384-a7ff-74ccb04f728b", "indicator--939e3401-2afc-42b9-9deb-aeca6b06a855", "indicator--e30c8904-fa29-4051-a093-fe5657a1e965", "indicator--37391854-72b7-48a5-90fc-8d7103548139", "indicator--195c8fd4-7be5-4592-8f93-13f9f63ebd38", "indicator--e63c4d79-e25d-49b1-8e1e-018c752eb37f", "indicator--70e0f87b-d820-42a1-a232-3d41bb7c0999", "indicator--4a1ec94b-efba-423a-9dfc-1d000d12bb47", "indicator--1fe83147-8b3e-44da-bc7a-f0bfd9d7cc84", "indicator--562d5479-df6f-4ddf-ac54-3948c8f793bb", "indicator--4da01cb4-b120-4783-b9c2-8e399e9cf301", "indicator--4c4e8f8a-730c-4ca0-affb-04e6f07ce79c", "indicator--f9288428-baad-41d6-8345-8e3dc61a093b", "indicator--7deab8b5-521d-4489-a949-f20ef5a2f1bd", "indicator--5fcfd150-bed8-45b5-a25f-1a4154e18595", "indicator--44159c43-404d-4142-b241-713962628027", "indicator--f1fba289-be0e-4a41-826d-bacdf5ed5f0d", "indicator--e4a7c632-d2b1-43b2-81c0-e7d23a4f0481", "indicator--fe90eefd-e668-4ef3-8ce0-f998ff4a3cb5", "indicator--72c7663f-6476-4a81-99a0-67e247eec77a", "indicator--dc75b9fa-3c77-4857-b853-671e2af7c535", "indicator--2e392b6e-ea52-4da0-9450-1519a4992645", "indicator--179f2956-9003-41ab-87fe-e9096794606b", "indicator--a6a3932f-cdb2-4e0a-9c46-fc73d61bf3f1", "indicator--c4750fbb-d8d3-4eb7-9028-626eb74f8ece", "indicator--89183704-82b6-4439-b4f2-05de92215ebd", "indicator--d2211c79-fbb3-48ab-87ea-ff83a97dd66e", "indicator--64c73e54-8c8b-4f62-859b-20219138f967", "indicator--9c97ee53-48d3-4d4b-ac9f-26b41a3d5b75", "indicator--49bef96f-4d15-4859-bc1a-2c80f5385ed3", "indicator--b506ea4b-2f78-48fc-8508-cb9c32d0b56c", "indicator--4fe10db7-d922-4e07-93df-8574012331ff", "indicator--b870d49e-e958-49f3-bf7a-28e001de2800", "indicator--a62dc63c-a4de-498a-a02e-e6bd9cce34c4", "indicator--5fb1ddf8-74df-4317-8832-5e6b9c15b057", "indicator--a2a9bc6c-1dde-4ef1-a2e4-acd5821c1a43", "indicator--104177e9-2db0-4bf9-bc5d-b8579bfadc82", "indicator--07c8d959-f93d-427c-9501-d2f3a538949e", "indicator--0bee4f05-fbfe-4716-97b4-9fa00b724a1b", "indicator--984ff1f2-7464-46a9-8140-badbdc9a4af3", "indicator--f7a72bf7-f263-4d52-9c2e-993b105a2791", "indicator--dc7bcd57-9fc3-4ab1-80ed-d1d9ac65ec08", "indicator--f757883b-38b4-4f76-bc26-eb3aaa39111e", "indicator--8dac33b1-cbbc-4ba3-b45e-f55dc1eb25cb", "indicator--e8c2b866-6c43-4ea7-93f1-496a107cfa5d", "indicator--a2d7a8da-8d25-4b59-9d0c-09a744fde4f8", "indicator--943ac336-c0da-431f-9ddf-c7003d4b6482", "indicator--7bd8948a-b333-4075-bc8e-f3898ce9b9ac", "indicator--508104b2-84c9-4d8f-a51f-03d1e99aa119", "indicator--9c577b7f-8979-482e-9eb4-f690a2590880", "indicator--09197ba9-5247-44a5-951e-2a858df8f2d9", "indicator--ebd722f1-ae48-4bcf-bd6c-755fbf209753", "indicator--1e237bca-b22f-4636-bfb4-896376c3f7bb", "indicator--6bb67731-eaa4-4964-bc2c-d6ad67d2af6d", "indicator--3c1f8835-263a-4169-a47e-8e7e46302945", "indicator--db22dfbc-e5ce-4998-90aa-68bb4fdae5fa", "indicator--a914903a-e32b-4d41-a56a-9a3c266bbafc", "indicator--addb7acc-077c-40c3-bfb2-2c982f656973", "indicator--d6b5671b-e6fd-47bb-be00-2c7406e71b27", "indicator--6434e45c-0c27-4918-b2c7-29e6fa1fee1d", "indicator--5a11e8c3-9bd2-4b47-a5f7-78201efb3acd", "indicator--b6d0d1f8-f80b-4c8b-ac54-d7ac39df2b15", "indicator--346f73e1-31c8-4ee1-b766-8f9358133f7f", "indicator--5483c11e-9e27-47b1-986e-e3e1421fbf66", "indicator--c89511ef-5a0a-4b74-a4c5-ecbbe32c4d53", "indicator--b91bcae2-37c1-4a4f-8a4e-55c8564a4f37", "indicator--7a775d7c-7469-4703-b987-349bd41ecc5b", "indicator--554af8b4-912d-4d53-8ca5-666fb0ac0572", "indicator--1acc04c6-84f0-413e-8ea5-ca183564f743", "indicator--603eeee5-9d62-4dd2-9663-a9ba04b86717", "indicator--7a23a05f-184a-4508-bc9d-10165b75d48c", "indicator--553ea5b3-f5ab-4a0f-a562-5079bffe11a1", "indicator--47819956-58cf-4600-ad88-332de6295a05", "indicator--09a5f215-bbe4-4036-8068-b54991b438e8", "indicator--c844cb49-ed43-43d7-a185-4e5dfb970b63", "indicator--a1152b7f-7c11-4bbe-828a-e339a6e0be28", "indicator--6b64f3b3-500f-4121-9ea3-c73e207688e6", "indicator--69d0f153-e626-4a54-b72c-3b57c2693dbf", "indicator--6efb2b18-41a3-4065-971e-160136c4dbe4", "indicator--583fb7c5-e39f-468d-aba6-ff67ff288f3f", "indicator--72ae8da2-6701-418a-992d-1f0d89cf02e0", "indicator--c181dcc8-84b7-4403-9a40-bb6cf4bdaa5a", "indicator--68514502-ee8f-4957-90a1-50b4925efd1b", "indicator--a30a0941-3349-48d1-ba26-f451e7f64a95", "indicator--35ff592f-bdad-4ee7-a767-d96f5db4e981", "indicator--8c738df8-3fdb-4c23-b469-1eff4a8b781c", "indicator--a8b99708-b1fb-459e-814e-d019019cd3e2", "indicator--dad452d1-5744-4c36-841f-52aed606ad1a", "indicator--c9707812-2845-48bc-ac52-ce956c04643d", "indicator--3be37461-fcf7-4918-ae6a-94728443d5e2", "indicator--6016d803-c93e-41f5-9d05-315b9f42a195", "indicator--72edc964-23cc-490c-a7a8-f708962b3d23", "indicator--62259c57-23ca-443c-b2fb-0d30e55bb438", "indicator--36d3e500-fac9-4e59-bc94-c9f90b93870f", "indicator--ef59ec5b-ad79-4b77-91bf-bf2ce120d16f", "indicator--2e4c3e17-ef48-4db8-8c00-b4fe9a4ae8c8", "indicator--6f022652-83b1-48fc-aae8-9526fd9afca4", "indicator--5f60efe6-3789-4697-8dbb-91b2227f2863", "indicator--674a4f59-4675-41b8-969c-80f29fcc225f", "indicator--2dd36d3b-1b8b-431e-8e58-55b10bc16dcd", "indicator--f8782fa0-2ec8-448a-8b6c-21cdb9e44dd3", "indicator--b60a83d8-44ff-4967-b4ab-72fafe4c1a03", "indicator--7e93f274-b51c-4d32-8e40-9d1f06620a8f", "indicator--800bd01e-ba4b-4068-9256-4c8f92fdca87", "indicator--9a81b114-6fbb-42b5-aa82-ac4a162f66e0", "indicator--2d16e8a5-46c1-4a53-a19d-314c8a988a3f", "indicator--5b4e7a1a-d8c6-4ac3-9611-0028266eed3d", "indicator--2bb5f72b-ad37-4b8f-b63c-8e6249cdb482", "indicator--60ab2281-f6d7-43bb-805e-5eb09f90698e", "indicator--10710e46-31bc-43aa-9d36-2d76ac0dea44", "indicator--c5ba2fc9-0d85-46a0-bdb5-13f51554d095", "indicator--c1fc2160-c712-4ff1-aa89-879a1cb2207b", "indicator--1f8981ac-3adf-4afb-8d31-9bd96d9adbcb", "indicator--90116dd6-4952-4755-a76e-3a8480cad90f", "indicator--99ffb262-96a2-4de7-8c20-f0ab0b4b90d2", "indicator--ff21a5c0-5147-48ac-9025-dbf3c29e515d", "indicator--12a571a2-f7d2-4c80-95d9-ce864ae7b4ee", "indicator--7b399a73-f955-4571-8558-eec3c0c951c6", "indicator--96f0fa27-8bfc-442b-9b1f-b6176fa77b7b", "indicator--d7e1ac6d-3a22-4e61-ab89-6b5190543455", "indicator--f86fa005-d665-4b8e-a383-2318403b56d1", "indicator--69218ff6-06b7-4bc9-b700-cc618e09e5f0", "indicator--8c3d23dc-108f-4bc2-b649-756a307e67b4", "indicator--ccf01ee6-85d0-49d6-a424-64c1a0485ff2", "indicator--ea09489a-4425-47ef-90b7-1fdc058c1cd1", "indicator--e4d1da0a-1ef5-4852-a630-c8051bd072df", "indicator--71e2cd12-6cde-4df2-aaf5-9fcba1ab1f82", "indicator--ae72ba90-cc2d-4a2c-93fd-baab2657f144", "indicator--0c1525ce-c941-47a6-93c2-3b19e4d96b10", "indicator--d92d6977-0b4d-47a0-854b-c0042efccdac", "indicator--fa17b5cd-700e-4a9e-920b-761c148136ae", "indicator--5b26c411-1517-4b52-9a0c-be6ad16df550", "indicator--76b0b550-217f-4864-9ebb-5322089dd7ef", "indicator--0c6a1393-7282-4741-807b-14c935d1ae8a", "indicator--e015282b-825b-41f1-8cb3-ffce63dbc820", "indicator--20a6ffbf-2f4d-4444-9e77-32bd638f2ed5", "indicator--303a5bfe-a824-44ab-83b6-63aaf4abc7cf", "indicator--fc6c15b5-5cfa-460d-a5d8-22bf9cbb05da", "indicator--aee940c1-f152-48cb-895b-ea8fe48cc407", "indicator--5262d58c-ee45-4717-8b76-c008cdfe34e0", "indicator--9a4ba514-a5e9-4855-beb3-4f7a29b9502c", "indicator--4c1780ec-c9d3-43b4-a0a9-e36d912920bf", "indicator--f1cb073e-ab8a-4ee6-a160-f29ed0f2ccad", "indicator--4973170b-adb4-4a8e-9844-47a82275c368", "indicator--8e8727d1-a729-4fce-b141-949a1e933887", "indicator--fdb7b73f-b152-4846-94d8-431180412ddb", "indicator--363c9641-056c-461e-8f53-8cc7ae7c89b3", "indicator--328b819b-7830-4b33-b77f-b5f977e76849", "indicator--44d87297-9c54-4f95-afa4-01bfd1ca22eb", "indicator--01022119-f4fc-4d0b-a2bf-b569b1d38c2f", "indicator--c8efb685-ed95-47a3-a827-0b37dc37c035", "indicator--c93af945-093b-4774-8a98-89db01ca9ff0", "indicator--dd478fc8-e4be-4184-a3b2-69c217d41df8", "indicator--713c3384-8b50-4156-9d51-c4ddc8b813d8", "indicator--51f3fafa-79e2-4f25-bb23-dddf747f1062", "indicator--6cf0c58c-86ee-4749-b5d0-74ad6e14e7b6", "indicator--72461d9b-e2ac-4215-a53a-6571b64f75d8", "indicator--5b6d4a13-d32e-472e-b422-57e9250912ee", "indicator--6b29a302-b42b-4c14-9cf1-aad5a04be271", "indicator--f2b0508c-eca9-44aa-aa7d-771712529b58", "indicator--31b040cb-50b8-4648-a6f5-e38ffb678d68", "indicator--8d4cc476-33e2-44f0-8fe4-617791409c83", "indicator--2430a447-93f0-40fd-961a-a4d372016c17", "indicator--6e922740-8877-4f88-b89e-4e41134e5993", "indicator--fb9ec3e0-9101-47d1-a671-20c01825bf34", "indicator--26f7878b-2419-447a-9958-28481d1d1d89", "indicator--d5481ac5-856a-4d06-a349-c64faa1270f7", "indicator--b9616566-1e25-4d2e-9de7-342f5b25381d", "indicator--67722671-9994-442e-b455-b14d1113a298", "indicator--23c477c5-001c-4f44-9976-ff5dfd61ef8f", "indicator--4369c045-5c33-4cd7-a74d-35f3d87232fe", "indicator--60aa20bd-1159-44c4-98bb-3c7d0a25bb63", "indicator--9a951ee8-a3e8-4582-a963-5b50d16b3a38", "indicator--409ec0fc-9475-4d29-b1da-9ea7b6ede9a7", "indicator--1dc15ce2-9dbd-4355-98f9-6dcc5e955fc3", "indicator--472954e0-27a3-45ab-9ff5-16617d296426", "indicator--83aadc67-4fbc-431d-ae2e-0d91d00d698b", "indicator--cba5b13c-a3b7-4f4a-932e-bec24eb96c7f", "indicator--7eeb3bf7-77f7-4377-9969-329486f4a1ae", "indicator--8bb13d41-a479-4769-897a-970e71fc8058", "indicator--6b726978-b4ff-4b42-8495-faade25ac37a", "indicator--37557ad3-059e-49c9-bdba-65c3abd5f72a", "indicator--77660637-8152-4b73-b78b-840a75ce5f0a", "indicator--6f955f59-7294-4f9f-b4ba-459a1925780a", "indicator--7bf3ef48-4281-4dca-a2d7-a66cbdd1e930", "indicator--88cc15c1-1ee9-48e5-9ce3-7ab0055ef8ac", "indicator--b43349de-c7ee-42a1-aeab-1d18d792fb68", "indicator--b5247e7c-cd22-44c3-9b79-5a011e384dc0", "indicator--bdb839ad-b204-4280-a5a7-08bf9f81258f", "indicator--fcebe935-6524-499c-bd1c-bf217e4f6457", "indicator--6edd4567-08d5-4fb4-965b-af9e0c3e0ae0", "indicator--02559068-fe7b-4b3d-9c73-b1c7bc298a5d", "indicator--6e90a761-cf74-45f3-be0d-0c19a6b3beef", "indicator--c3c7c48a-b0df-4a76-9f4a-ac698fa232a8", "indicator--f5572581-2312-483b-bca8-ed481f2d8620", "indicator--63857bbe-b264-45a1-b2e8-447d62b9be03", "indicator--2f9fe971-aba8-4e89-b53d-b6868cf4c356", "indicator--f1fbd4e8-9455-4f76-a71c-ebe6b380ea50", "indicator--ce4dbcf6-9e73-479a-a3bf-3a026145b669", "indicator--87ea2e32-70a1-4be1-af73-7bee56a02f64", "indicator--4b048757-6c82-4104-8373-3f17f6fd0820", "indicator--f336f341-8fe5-44a4-a35f-751feaf2c3ec", "indicator--cb9ec86b-ff53-4ae7-8463-d63547810c96", "indicator--0c47256b-d10e-4a5e-9ab7-3810f99bb034", "indicator--c37cfd8d-ee2e-4d87-9f5d-9ee5e913f135", "indicator--62556175-748a-4a95-9698-408713b9f31e", "indicator--c7a1fd90-87e9-4582-947f-525241416e71", "indicator--d3ab7219-4d53-4398-9bbf-ba3b32981f1d", "indicator--a86f3b37-683c-4aa2-8bdd-b15e68ad9e55", "indicator--d7af2d5a-03a1-4a7a-8950-476334a2207f", "indicator--93f028bb-8589-447b-bd82-5f78a7bbba0c", "indicator--e4b61931-f3b3-4972-9abb-782676aa15bc", "indicator--b170244a-eabb-4da3-8be0-e38aa648af7e", "indicator--8057a1f4-a087-4976-9a9c-ef6ab3aa4aee", "indicator--b5e16ad9-1416-4da4-9402-e88bd7667b0c", "indicator--895d4152-dcbd-44f3-9a70-471e36a00962", "indicator--9409fb7c-37e5-4ff2-b124-355cc63cd423", "indicator--9b53348b-f06e-431c-b2fa-28d52f567120", "indicator--fc235f45-a30f-4b71-80a6-19ac3ef72bad", "indicator--ae26287d-c959-48c7-b20f-ac3488b3f178", "indicator--d23d01e0-d649-4db3-bde6-4566e306fc71", "indicator--2328052c-82e0-4076-80ab-c9c008721239", "indicator--de4dca21-094d-4ae5-879b-3f76e2bb4ebd", "indicator--0ca2a64c-0266-49c8-a220-e4ba401e5ad4", "indicator--fd220cec-8a4c-4a16-9a74-65ec114c2338", "indicator--91d4d6c3-e0b4-437d-87fe-831717c5c188", "indicator--5bd44830-6524-47c2-b716-3010e301be0d", "indicator--558eb803-d1a5-4da7-8d77-683a18442f87", "indicator--2d03870f-0e9a-4a18-98de-9175aee1c359", "indicator--11e23710-97f1-4673-80b4-c9eb976ede6d", "indicator--8ab33d4e-29c9-431d-a1f4-f36557fbe842", "indicator--4ac4b76c-09e2-4acd-9975-d333dfe8872c", "indicator--9df18f23-8ae1-4134-aa6e-5e25c39161d6", "indicator--815d6041-9ac1-4744-b097-5a70c17f36f2", "indicator--f9faf540-0632-443d-91db-98e9de71db80", "indicator--5d77d9c8-743c-4a2e-b9eb-a0f994f38a62", "indicator--a93b73ef-aeb9-4f19-a295-c0b812b3684d", "indicator--a0bb556e-628e-4976-8d6e-9ff380cd5f05", "indicator--b4d4d758-2b5d-4ada-898b-f35ea9b320e0", "indicator--6884baee-794c-48d2-8979-cd3d8356ccb4", "indicator--934788eb-d201-448c-916f-2577fe2abb56", "indicator--ee4c0597-d706-4b48-9abf-48ca7c0492b4", "indicator--2b03303b-dc1b-4c48-a44e-0812ee90ba83", "indicator--4a6c2fb2-17bc-4e79-b837-7f098bf8f715", "indicator--37c0c5ea-4549-4aac-9529-95c1c1429961", "indicator--7f572b36-1feb-4f87-8538-453c17266353", "indicator--6124a957-bc1d-4adb-9100-a2521830c025", "indicator--754dd58b-43aa-47d5-8828-5ec5d8198d1d", "indicator--6d9f1d26-9bea-4f2c-9c70-6d5706f803e8", "indicator--ac06ab19-8f10-4f11-93ef-919471946f53", "indicator--3f86e6c4-814f-4f94-9aa5-108a25e93e1d", "indicator--fdf19ac8-eb96-4579-a2a6-20c9143c2635", "indicator--dd361eb9-e090-4c20-a1f8-f2b4c387c15f", "indicator--8fd9c6cf-5879-4bb4-8db0-7dc097f1e813", "indicator--0baa6815-bcb7-4aae-b6a2-421cbaf19775", "indicator--58c9cad9-aa61-4566-9ca2-a530f7f3278b", "indicator--28012425-24c4-4ea4-9e3e-b6d815da9087", "indicator--ef27af3e-70b7-4fce-9bd0-b22fdc320b0a", "indicator--0f46cfca-3adf-41ca-8085-8e9d258d37f0", "indicator--adae0311-9a03-449e-b223-7f75462109b0", "indicator--47ec2056-6151-4972-9c82-cb988bdde155", "indicator--4e0bc94e-e38d-45b3-b5fe-1c6aba79aa2a", "indicator--fb474f23-35e9-49a9-9ab6-53669a53bc5a", "indicator--c22a745c-9c20-4d17-9116-cef70ef8f56f", "indicator--80ccfb58-39bf-46dc-87bc-407406b426cc", "indicator--a493d5ff-d1dc-4cc0-bf07-f35eb35bd028", "indicator--eb5c7cff-b5fe-4a36-88ec-21d45c69e321", "indicator--ea240363-ed61-4aa9-bde4-50ac93b9ded0", "indicator--56af0b6e-1f82-49be-bc46-ef7e0c809868", "indicator--97cc266b-e69e-4cab-9b8c-9f3e8fb1e312", "indicator--e8bac9e4-3acc-41f8-adf7-7e45fe79cd51", "indicator--8e8f16bc-90cd-4b2e-b2be-8a498984dc4f", "indicator--3c3e72c6-d5a3-40a6-9936-12c52b45cf9f", "indicator--b1644e42-1da9-4d2a-9362-6282b1220705", "indicator--610715d8-e0e9-4064-8ca4-9ecbf9016dc2", "indicator--60da15eb-75d6-4ef3-9e04-7f0b3e6b0f06", "indicator--9d25c253-4160-4a54-ac53-5087214d7f17", "indicator--1a7277f1-4ba9-469e-bf7f-eca2b2c044fe", "indicator--a7fa270c-01a2-4a31-b938-0642a5a1f04a", "indicator--e2fbd96e-b5fd-4a82-af57-27d69947116f", "indicator--8eb2b4ff-b820-4400-b184-7c4b6cabc5bb", "indicator--be7e505e-30d0-4579-a1c3-147343f2c7c8", "indicator--b82def39-7389-447e-858a-93017476c038", "indicator--750c8ff1-ca05-4b78-9cca-4aea6cdf365f", "indicator--92a4daa6-fcbf-4e2a-9e9b-695022e97018", "indicator--d00cdc24-0917-4662-ace1-d0f3c11ea4c9", "indicator--8716ed56-ee44-42b6-b766-dc80d21390f8", "indicator--bcdb736e-1f08-4983-ba2d-89a618f803be", "indicator--27ace5da-4389-42a3-b357-6f3eb83e7cbb", "indicator--1f60440c-6d38-42e4-b0ec-c49688e0e554", "indicator--a1ca298e-0b35-4e80-812a-1a4a40a02baf", "indicator--f2dce8e0-e8d0-452e-a9f1-a059af0de027", "indicator--beaeceb0-a974-4a2b-b4c6-f5ebac83d93b", "indicator--2b126a55-3d23-42ed-89f8-adc58de489df", "indicator--9f5f87f8-649c-4e34-bdef-df9d54466d68", "indicator--7ca22dae-22e5-4ec0-8e36-3a89c91d272e", "indicator--99d7df1e-261c-4a87-9404-bd6710fc5aed", "indicator--0a0d4c58-4a03-4625-8bf2-c7aa2e70feaa", "indicator--6f62dbb3-7389-4b57-b654-66d883c04a4f", "indicator--eabbadd9-78cf-40a5-a36a-6199eeae2656", "indicator--cc34b4d3-94b7-4a3e-8f8a-a1b1f607ec51", "indicator--dc24c634-79c5-4a3e-b20f-a4f01387bafc", "indicator--ed58a68f-1d1f-49cb-8b92-ac3730755652", "indicator--ead59e17-5934-4620-92a5-0996b6ea663d", "indicator--96dfdfb8-6ba5-4d1a-95e1-006799c0604e", "indicator--88ae0358-9144-4615-80d2-97c1f6b36576", "indicator--f20bf7e6-0600-4afe-983f-cab30dcaa912", "indicator--f427e601-c0d5-4941-832b-9a2db69e3356", "indicator--999f3b7a-e581-408f-a397-89dbc1c71274", "indicator--4b866b99-0c71-4c9d-957d-04f08559e8a4", "indicator--5fd64f54-7ca0-46b6-8db4-80bd02a8319b", "indicator--d02b93d2-b53b-452c-8807-85e6d9432620", "indicator--f0fcc925-1278-466f-a82b-9aebc3873303", "indicator--31d0e291-7c69-4279-b313-5b53bcdfdc12", "indicator--d4d3c0b8-87a1-4a67-b274-d76d06d5c8e6", "indicator--1ef44baf-33de-49ee-b6ee-387d2dbd3954", "indicator--b455f2c1-199c-46c3-93e6-91ae0922f8fa", "indicator--c40ffc96-82c6-4585-be0b-11e4d5f4df47", "indicator--f477ff79-4905-40bc-913e-e6ff2b3f2651", "indicator--61bffd20-6f0d-4242-ad30-32ea1241954f", "indicator--d41b6ce3-2054-48db-9ced-bddec0c41c00", "indicator--9d1a63ae-3dc8-49da-9804-de5ffb1564ba", "indicator--0b1903e5-dba7-4065-af26-0b80afaa438f", "indicator--327d1242-f2ff-45fd-8df4-c99d237defd5", "indicator--a95fdee1-ae62-4d7d-903b-6435f8fa00ff", "indicator--2421dae2-5019-4dcc-8db9-775e8ac0cb75", "indicator--9965f4f5-6658-4121-a746-67162c884594", "indicator--8224821f-6846-4278-8925-d0b5869cc242", "indicator--17fe7690-55ec-4e4e-b0d8-5f4f2543f5f7", "indicator--f1325cfd-ce82-4d4f-bc46-a3adfcafc54e", "indicator--77e93d8a-305c-40b2-a5ed-97fa211fd394", "indicator--da3071d1-c7e3-4ee8-bac5-d7ec8a1489a4", "indicator--eed50d87-b2f3-444c-b376-0b0af101f1ec", "indicator--db970ab2-0d0e-401c-bbc0-4865747ea497", "indicator--6ffcebef-37d0-4f1f-a75e-e301cf951d7e", "indicator--1141784b-9b7e-490b-b663-01bd8a88e6cc", "indicator--5c83e210-0845-4cdd-b9eb-9e345ca0de9f", "indicator--6a787f53-5cea-45fe-be04-c03bb1f6a1de", "indicator--23a31a9c-2b45-4079-9cfd-5d7120f29a84", "indicator--b78dcb7e-3fca-49ab-88c2-263d0e605a56", "indicator--17da8117-e4b9-46eb-941a-271c1d953258", "indicator--b1237c0f-3a96-41ba-b1a4-44785b970f01", "indicator--86b8beb1-06d9-4434-a20b-f4d707ce9736", "indicator--eaedcba1-1bcd-4813-b4c6-fa2d691941f4", "indicator--864ecaa6-3081-4c4d-9a0a-1eca6bf4d7f8", "indicator--1c0023a2-f68e-42eb-a604-133e04a4f931", "indicator--1b29f5a8-ed28-4f85-9d25-fc7a4f170a71", "indicator--a79ea20d-d7fb-4a55-b815-dc7d3ca45375", "indicator--a863ea54-c33d-45a3-9d49-39396818612f", "indicator--52c53df6-939f-4b99-813f-5107b8aad6be", "indicator--1fd12e47-765e-4a56-933b-439009fd6c3d", "indicator--860d0b34-f53b-4423-94ce-99afffbc7a44", "indicator--df69be96-f6d7-4b28-ab50-91d5830014d9", "indicator--11f8c753-9993-4161-a281-6377be1464f8", "indicator--450dab7b-f4de-47bb-981f-99c0e2fe2e28", "indicator--4778c074-0a5d-4695-9f6c-a46be4e37d9e", "indicator--aed9402e-8d2f-4112-92f9-cbf0e03e3add", "indicator--aef696b4-31cb-427f-8d92-7be551186912", "indicator--fe72c1dd-3190-4c76-80ed-6a75c609d892", "indicator--ac84f9c4-63f0-4e12-877b-6d7b33fb8814", "indicator--bf25487e-f654-4693-86bb-94e71617953f", "indicator--144f5f5f-1915-4227-9df3-fbcfb8c18919", "indicator--d4664710-09f4-41f4-841a-eaf2c5b45cc8", "indicator--c79bccbc-29ac-4090-b855-96655aea8bc5", "indicator--3f22d855-7af7-4ef4-bc80-dea5d7c74f43", "indicator--f7701390-242c-4c7c-ade0-6a4aaaef6505", "indicator--7590f90a-5c66-416e-ab7d-9f7077ff3f3a", "indicator--a557ea3a-706e-442d-aaea-883906c23524", "indicator--999413f7-2836-4ff4-b15e-3a928ad63e75", "indicator--8142a972-d9d9-4507-b19e-96a837be0b58", "indicator--a2dab6d0-73dd-449c-a785-5d26448317fe", "indicator--c7b79b02-4c67-4e8c-aa38-726ce1837591", "indicator--6becf629-fa94-4e23-8b1a-260fd4fe2689", "indicator--312e4686-f13d-47f2-b2b0-b860204e83ef", "indicator--69ec5672-6e84-4382-b05d-fda60789dea5", "indicator--ba183222-b248-4672-9517-6a2e93aa50d1", "indicator--01bdf5ce-c905-4cfb-b001-a6897d564b57", "indicator--186be96e-b7cc-47c7-9f9d-d1c6cfdc9477", "indicator--7fb5c105-0acb-4c32-820d-57c382a99c48", "indicator--b8b8fe1d-2725-45f4-b562-7a34208ef744", "indicator--41173460-4af5-430f-9853-51521217f9ac", "indicator--b872a5bd-e613-4ccd-9d1c-24319773303e", "indicator--6f5ffed8-4103-485b-be22-c50f0c3f15ed", "indicator--b12372bf-2510-4e62-b2a4-2ddfa93ecb85", "indicator--79dc7828-5118-461f-ad1c-4a3f9853c742", "indicator--b3d37b1c-f741-430f-804d-46f526eaef38", "indicator--dce4ec11-ee3b-4f03-8643-bbf4813205b1", "indicator--719625cc-a16a-444c-b5bf-f3e44d2177a1", "indicator--57dc0842-11cf-43a5-baeb-f01f4ccf9240", "indicator--f8c28c5a-cce2-4e2f-919a-17c507230a68", "indicator--3f79bf72-033b-4367-8c00-6763e9f1bf84", "indicator--eee2b17c-c282-4a06-ac86-1a93bc0ab4b1", "indicator--0875ccbc-76c3-4e09-a88e-46499f1290f7", "indicator--d962599f-d68c-4181-a857-1683158c65e3", "indicator--25c008ee-a863-48bd-80b3-bc288af1d76e", "indicator--3ff32291-a916-445e-bb1c-40e88a5a106c", "indicator--b793bc57-61c8-47ff-b10b-763ee2048678", "indicator--ffd8eafa-33d5-4691-95aa-66a6fb20c946", "indicator--d258c3c5-455d-4271-b2ef-703b8b8330b1", "indicator--e0a394bb-26f3-4a4c-8f78-a18b98216c95", "indicator--a413c2b3-0e2d-4f61-813f-34a5860927eb", "indicator--96fc62c9-1b6f-4e61-a6d8-5b274d4f8c7a", "indicator--144f6ca5-6f99-4c09-87c5-ee6c1d631978", "indicator--fa881c7e-4f32-47b7-b70f-10b875c904eb", "indicator--0e592cf5-25a0-4a37-a065-9a8de99e0737", "indicator--e462768f-ed12-4da4-8339-76a5d2935a59", "indicator--4a6a94c3-8950-41cc-b262-942ae7b18783", "indicator--ee51732c-a261-497d-b383-5db190ef1d47", "indicator--4611dba1-78a2-4efd-9353-80aa6b3611f8", "indicator--e8a9ae40-ea06-46d9-91c0-69ae5d9f33ae", "indicator--67d76ce2-4109-45a5-95df-ab98e6ad5dd1", "indicator--391bc40d-a8f2-4e27-9e3d-dfc7cd7027e0", "indicator--6876bd58-9952-45af-bbaa-d974c9650ce0", "indicator--ba38f501-7406-4308-984d-f2be58a6bd9a", "indicator--ce95e714-49a7-400c-b725-849774120f55", "indicator--cc4857d5-23ea-44e5-b514-b4280f23268c", "indicator--32f9da9e-aa61-42db-8645-b1fed8e51fa1", "indicator--a7d56a31-746f-417f-b814-35e241a27eb0", "indicator--071fcff2-9dbf-4ffc-80c6-8b9c08097f3a", "indicator--89396eb5-f661-4aa1-b3a8-18fac0c6c021", "indicator--d92ccb67-1187-43f4-b3f0-4800a211f8c3", "indicator--1d815044-8f90-459b-998b-a5f3b552e972", "indicator--edb0a18d-873a-45a9-9952-cb2084b6af82", "indicator--c5c1357a-32d1-4469-b771-458cba132cf4", "indicator--473af939-e479-4099-a0d0-6db764f2dda5", "indicator--89b5f9a5-5deb-4cc6-86e9-1bab2b78cfc7", "indicator--224d7bbf-a38a-4112-ad1d-fe5fb2071bdb", "indicator--ac572e9e-4c7e-43b7-a174-6f78cff03023", "indicator--f3c89989-3104-48ec-8956-1cc91ac02df9", "indicator--af08b21a-f8f5-476e-a4b6-72cf36411f10", "indicator--3baee76b-f355-4df1-8b32-d66e84acbd15", "indicator--2ef1937f-1483-43a8-a205-925046b9a716", "indicator--6e7f98e4-58ee-4921-846f-83ef5953d3ea", "indicator--ceccb8e0-354a-4918-bcc0-607b4a416ef9", "indicator--6e4e1bca-a00f-4399-9412-a04bfa48a712", "indicator--d3cd1e3e-9c46-47e6-828d-289d5d5ff445", "indicator--ee152f2c-bdce-4ecd-bdcc-e93f44047cbf", "indicator--132f33aa-ade5-4a29-b014-4099fae2b77a", "indicator--b5c8b87a-ae33-44ac-a90c-f79c8fd60a78", "indicator--a507fbc0-c7d6-4323-b4ec-5046976e6e67", "indicator--6716527f-fc8b-4aaf-a39e-3acbb69eb012", "indicator--78a95de3-f124-453f-8cac-5531f585e4aa", "indicator--98847e4d-e2ff-4be9-af19-e4bfbf318bf5", "indicator--2511d629-4a28-4eea-9adf-69f1c2fa2593", "indicator--e866977d-0860-4909-a143-f71770d6c9ae", "indicator--4944d037-13da-4969-8001-9a0a03ebbd28", "indicator--6c4bb3a8-5376-4d71-818e-4e491080c442", "indicator--e6b81076-5f33-4848-b2ad-b59e2aeb3156", "indicator--811b13ed-49ed-49c4-8ce1-f1ee8b24471f", "indicator--2330a7a0-cbf0-4c6e-97b7-6c3ac455b5ca", "indicator--8f429c0d-b6d8-4bcf-b2ca-cbe5c9ecd695", "indicator--3add706f-0796-4a95-94a9-2e2ed002a882", "indicator--bc340c96-0fb3-4f34-855a-ad2b260d6224", "indicator--4d540274-76db-4e79-b6e6-98860f75a3d1", "indicator--ef6117fe-b942-4e11-8689-1a7808e10bef", "indicator--4c8fe594-e24e-4114-9f4e-3cae62f09800", "indicator--c0d8fa23-7806-4200-96e1-fd1748782c41", "indicator--38e7870a-2826-4f10-84e4-314128e898ba", "indicator--449a9261-2d04-4cf4-8378-d5824557c78c", "indicator--a5f51f86-565d-4e88-9641-44ee4a0c8492", "indicator--e934be52-c07a-4972-bf92-4a83ad84d6ab", "indicator--4747c2b9-bde5-4790-97a2-9f8f59c96946", "indicator--59c890e4-9a5b-484a-9d58-44ab571b0597", "indicator--fcaf6977-aa4e-4c0c-82a3-ace0bb6bf1b3", "indicator--0697ea4d-9bef-4cbd-a47c-36d9feece3ce", "indicator--a3960dcd-4915-4303-8cca-42e06d9c5e7f", "indicator--39013e52-7f0e-4dc2-82c5-dedf188a5b05", "relationship--fb01076f-085d-4efc-8bd3-d113e51f7b12", "relationship--da8eddf7-3999-45d5-ad2a-5503ce9d8c15", "indicator--11a4c101-0218-47f6-b11d-b11135e3d01c", "indicator--3c48f3f1-1691-4a69-add2-14e98161ed38", "indicator--5f97855f-2724-4da1-b728-8807c4578023", "indicator--b218a5a1-cfa4-4eda-8b40-25eb9d494763", "indicator--c3e9b6e0-9da4-420f-9aac-ca56f33f877e", "indicator--90b574e6-035b-4d32-9107-3b1f5fcd9c5b", "indicator--6dae1a9f-d9ef-4520-b017-620d16c3d08e", "indicator--f33d3720-5fbe-4bf9-bafe-e7faf83875e0", "indicator--36230127-4f17-40cd-95f6-0d3003324b79", "indicator--00a65cb4-3ff9-4722-9714-07a3ca0efcc0", "indicator--8200ee49-4bd2-43b1-b356-d1e2d51d840a", "indicator--d6d8e394-6f17-46fd-b363-e8dd3cbee042", "indicator--fd8ea7a6-8ea6-470b-954b-95da79903121", "indicator--e4479306-0f66-419d-a67f-1858fe9dc1f4", "indicator--bd89051f-d6c1-4103-9e6b-cdb305ac8c7e", "indicator--45d711a4-b9f5-4844-94a8-63065db9a754", "indicator--71f8e475-be9e-4436-851f-6b878cc3ccd8", "relationship--0ed21ca0-dfc4-4ab6-88fa-8abd859a1ba9", "indicator--dd76ba1c-9941-4cda-8a41-160321de4fb2", "indicator--5d3473c3-3771-4312-9d72-a15e8f3a7869", "indicator--6e62185c-3292-41d6-ac6e-a826c1855239", "indicator--9c48f147-a3dc-4b12-8e7c-b396aa4b8f90", "indicator--bf8a7b19-7987-4e3d-ba6d-aabb2b52a35a", "indicator--2cce096c-bead-4378-a3cf-aa421ff453a7", "indicator--bd4446ae-f059-484e-ae53-0792452a2e10", "indicator--cc1f7efa-356b-440d-ae07-b2c0b1ba81dc", "indicator--871b7565-5ad2-420a-b662-480549287cb7", "indicator--54fc6c51-ae5a-4048-802b-1e80319346b5", "indicator--ea3cbd88-30b7-4714-a5a0-430e830dde0f", "indicator--ef8ee852-8619-46d2-be88-ae0a094bf4b6", "indicator--5602ac56-6e49-4220-a3e3-94f8915477f4", "indicator--2d99fafe-a64e-42a9-95bb-df293c56254f", "indicator--428f0f96-4ae9-4e66-85f6-927a5d09e8a2", "indicator--e6906e13-c406-4417-929c-97235e3c546b", "indicator--19ca88a0-df8f-4800-a693-c24cbc8212d0", "indicator--64eb7790-af71-45c6-a65e-4c8fc82abb1b", "indicator--ff346482-566b-4dbe-9353-e7c77040b0cb", "indicator--0666d1f9-11ff-4950-a2c7-e58ee6e4b6a6", "indicator--de81e84b-67bd-4468-a18f-45f1d50302e3", "indicator--2b7a3aad-0979-4f09-abbf-3e41403e289c", "indicator--5c61f667-9a16-4224-b313-fb2fa950b2b6", "indicator--03a9181d-b8d1-4f9d-8e49-d14a71b5968a", "indicator--c0de7203-5e74-4733-877c-79910cb7eebb", "indicator--f42edd2a-199a-469d-9edb-7f3c90cb3533", "indicator--8260f34e-66dd-4c73-8e8d-9779bf4e4748", "indicator--12686965-4b13-49d9-883f-114370dea5a6", "indicator--5a007be2-5f76-4a31-9dbd-ae4c573d100f", "indicator--5f7b0f03-e1f3-4a43-b4bb-f688d309ec69", "indicator--79e2fe52-f276-4120-8197-b73484c79462", "indicator--7e08bba7-6faa-4174-808f-c152cf2eb2c9", "indicator--653c2553-d93e-488d-8397-caec0b15a447", "indicator--fad1fdee-d838-4dda-8061-872c7cbe5531", "indicator--68f59b56-b879-4cd9-adf1-db824b445c9b", "indicator--507262b1-94bf-40b9-a6e1-73a4213f6cd7", "indicator--884bb44f-12c2-4e39-822d-c1031f823be8", "indicator--43f80d9b-d942-447c-a3d3-e64855215e66", "indicator--7eeef39e-3406-4545-bd83-226d024d9817", "indicator--a7bfc32a-5aed-4101-8740-5d031e44f0ca", "indicator--0f62072c-77cb-47f3-9f08-a855a0628087", "indicator--336056ab-ec40-4f98-9ba2-52ca8648dfc0", "indicator--417e5aef-6855-4c6c-8f33-ea37fed58a44", "indicator--20cef544-fe81-4a9e-9660-9b318dc6d47e", "indicator--2d87ffda-97e2-4e07-b7e4-52f3978e1cba", "indicator--c1e985c4-ae7f-4d33-b63c-a543418f1d32", "indicator--1c65ea4c-5ced-4d0c-99e5-1b11a2be6f4b", "indicator--6c69b19c-ceb8-4090-879f-df0be4f09366", "indicator--999b2e3f-e6f8-4a0c-9927-6d5193b277a9", "indicator--4967b69d-8275-4de8-9b73-48a3fcad9809", "indicator--74ac2661-a4cd-4432-aa74-6a748197de81", "indicator--920fdca0-6113-4550-957e-de2a16abfff0", "indicator--13f1f61a-1dba-4cb4-93c8-a93f8a05f2ee", "indicator--35286746-fb0c-4b8b-a50f-d905902e4fb7", "indicator--5ff02c1e-7e53-4583-888a-4b76e5881599", "indicator--cb235da5-0f58-4355-9c1f-6df35302738e", "indicator--b468b173-2c08-4cfa-84f8-f356042fc0f1", "indicator--e898f617-a38b-43d7-8a0d-4a3f2b1a656b", "indicator--40803bac-3977-47bb-a817-62ce08cf9e11", "indicator--e2b9c730-be31-40d6-8787-fd244e7f6be2", "indicator--97976992-3f63-4e90-8a97-631c738ce5ed", "indicator--804af10e-4bca-4cfc-a079-8dd12b80608c", "sighting--809c141c-19b1-4502-980f-559432a0d379", "sighting--451509ff-3ecf-4812-9bf1-7484fdbbd2f9", "sighting--abf196af-8a8c-4456-ace0-1d9f3ba53d03", "sighting--1ab516c0-8a49-457a-be1c-94232421ad68", "sighting--0b3bea5d-a667-4ea0-a01b-a48f00da6196", "sighting--750ac11a-1fe2-4a75-ac1c-c1568c2e7681", "sighting--e91eb313-b9cf-406a-8df1-e8943960341c", "sighting--f3cd0c57-eeed-45c3-9353-e03450671a61", "sighting--c71f8fa4-f45d-4e3e-b9d5-36e0c0064653", "sighting--92ff2412-efca-4981-b4fb-917df59a305a", "sighting--54dc1fd3-e8b0-4854-9d0b-447441daecc2", "sighting--d4a98796-abe6-4884-bae2-6554243a0ee6", "sighting--f6db71fa-caed-4567-9f63-fa4170aae57c", "sighting--590493c9-42a5-4a11-a543-a23bffd62448", "sighting--a26e9cdb-903f-4562-8026-a11481197940", "sighting--d7a5179f-9e7d-41a9-9691-6bf77265a33c", "sighting--a62af5c1-c765-4a77-a703-31d92bb6fefc", "sighting--f1e108b2-0549-4370-8c8e-5f1bda4cf593", "sighting--7e0a0156-935c-486f-a279-048c59a1fa3f", "sighting--d17ad9aa-0cf6-4b22-b101-cfec94bafd3b", "sighting--7abf3dad-a6f7-4299-9d84-894ad8843183", "sighting--303b8b4d-4985-444d-af26-2e32314c4ff0", "sighting--4a6d21bc-9f34-40db-b003-0daa395a81c1", "sighting--f71dd058-2c3d-4efe-8614-fc8827df0fa5", "sighting--c5a32cfd-fd06-4761-bf44-c64778843743", "sighting--362209bd-e618-4d8b-bf07-360f05e04eee", "sighting--1a8a85a9-ad9c-4e10-9b1b-db0e5cb8fdab", "sighting--37e95948-93ca-45d2-ac57-6686c226a547", "sighting--d4f6948c-00cc-4742-b006-bfe545d129f6", "sighting--731f5d83-cdef-460e-bcf5-15f69a58aee6", "sighting--118b2c13-4233-4e8f-ae79-893c8c4bbc4e", "sighting--e5e85a80-4320-46d8-8c67-db58ee55bcaa", "sighting--066d667d-07bf-489d-ba10-b184dbc396d0", "sighting--871b1c35-00a8-4b72-8303-bf12a7e4c757", "sighting--01ec814b-a1b7-4b49-902a-5d6b9d808367", "sighting--456ca2cb-8813-431b-973d-4020c0d0b586", "sighting--5fc5bf1f-a49b-40a5-b1cb-216a01dd3d03", "sighting--830cd490-ff4b-43c1-ab94-fe121825941b", "sighting--d6bde373-8d01-435e-a5a3-2c340da28807", "sighting--d5f5747f-0b04-4cda-b369-3e3454cf44c0", "sighting--20840484-783e-431f-8ee9-56d36f9d6e78", "sighting--f566b4be-10c9-401b-baf4-c176789ee628", "sighting--ce088e9a-b7c1-4383-884d-a3c41b714b6c", "sighting--575128e5-e19a-44c4-8288-6deb9c216beb", "sighting--868824d6-6395-4251-a141-02c75c72dd06", "sighting--9a0b5bf6-4b8c-410b-8cd3-55f4bf79fd3f", "sighting--36f59b81-1c66-4634-aede-19e7739e8cc0", "sighting--ad480c98-348a-4c62-bc3b-a522fd9b0aaa", "sighting--790a6f87-955d-4552-a98e-d2fd84786062", "sighting--9e52a72f-fe12-47bd-aeea-3b5a698052e7", "sighting--382e1831-fb79-42b7-99c9-cd675a92ddbc", "sighting--1eb97489-8301-4f23-bfde-ba7ff9ec93f8", "sighting--b99b3849-2df3-4f15-b125-f6e130f5b765", "sighting--33c2b619-402b-4306-ab13-3a1f5968fe6a", "sighting--b7b5066c-d8b5-42cb-8715-0f1bec296895", "sighting--2b1e6788-53ab-4879-b963-c7abe43a7e4a", "sighting--c25928aa-f304-4794-a1a7-ea39055349cb", "sighting--7a4ac0e0-4b14-4659-965e-3d9c41cf7e63", "sighting--19974a32-41f9-42cb-af63-ca70d37b86f5", "sighting--e26cc680-8d74-4dcf-b86a-8a78ed52b452", "sighting--3246b802-df5d-4ded-936e-c5e403c5f0e6", "sighting--3eaade14-262f-4d22-ac10-e843d6d7cb86", "sighting--ac5b5442-7f9c-466d-8d94-a17c9d719d2b", "sighting--0eab1297-c2c1-4d2f-a92e-ceabd0795a8b", "sighting--13113271-792a-498f-81b5-b88ab9f66fab", "sighting--9b6152f3-cfb4-42e0-970d-10742f012e4e", "sighting--15fa8a1e-e663-4fe4-90c2-8be55450140a", "sighting--437cdd91-e165-4446-babf-c32d8ee38105", "sighting--aa9b67c8-d02b-44cd-b0c6-13001ee9a2c0", "sighting--7b621b23-45f3-4c28-a085-1b7a45db2717", "sighting--fb2c54d0-36e1-4062-ad1e-71b8f22437dc", "sighting--1f1582a8-f3f2-41b6-ac10-d801813f7715", "sighting--9fa4664c-fcd4-4ae6-8ebe-fe0933374d4f", "sighting--d51f3f56-a90c-44d9-bca0-c6fa2d2907ab", "sighting--5c79071e-a20d-43cd-a800-4b4040bbc58b", "sighting--c9480b6d-ac7b-4b5f-b959-dd3c948e0064", "sighting--b386510d-bf05-49ea-b681-edfab3a2867d", "sighting--35315f43-1c41-4d49-828f-7069121b75a1", "sighting--311f8c30-ee63-4137-b512-f77d4348fe7f", "sighting--0020a7e9-0c79-4ae5-9bf3-20faec5cfa69", "sighting--3c3739cb-4152-4f26-b0f8-a0b476c470da", "sighting--bbbf1c10-275f-47fc-98fe-b59ef2b0d536", "sighting--ecec1287-f2de-475e-8f6c-f5b5ae4e3763", "sighting--7630808a-bc54-4291-9ceb-3cdf45d19e9c", "sighting--6bc85777-7c22-4f49-abe0-b94fabf77f39", "sighting--99e9cf62-3440-43d6-8fa1-ef87d8a4828f", "sighting--17c3829b-5a8f-4ae4-b38d-bc97fd684ffd", "sighting--6260e576-6392-4b0b-b60c-fd37c670f10d", "sighting--28b00579-20f1-4123-abf1-bcac80690fd3", "sighting--19a0d1da-2d82-4495-a596-01045053be58", "sighting--458ecad6-b7be-4b7d-86eb-8a78eb5318e7", "sighting--b3ed0f58-2b30-460a-a2d8-d105b5f30910", "sighting--2af43e3e-d4de-465b-b035-a9871e5f1804", "sighting--4c0bad19-1b6e-4519-bb0a-18b0b08e16a8", "sighting--02519b08-1c8f-4151-b19e-1ce5bc821d28", "sighting--44f3e181-c32e-4f9f-bbb9-dbd6477ab5bd", "sighting--eca5a8d8-25b8-4ea0-b0a0-fa75a3675062", "sighting--a72e5b34-d22c-4b4f-aa38-ce80915fcd81", "sighting--1678c2cf-f3bb-4f54-80fa-1b90fe29b576", "sighting--a035badc-4ffb-4fc9-9b42-a44d48df37b8", "sighting--2b0ca56a-b3d6-4b31-8a03-42c5194acd45", "sighting--b13f2471-5fe6-4067-809f-c32df5ade68d", "sighting--7fddda6c-a2fb-4bf5-b0d6-265de5647d71", "sighting--cf92f291-720b-4c11-86e5-edc180075f5a", "sighting--22c9c0d0-cf44-443d-9bf2-5892eed9509b", "sighting--044c1a73-26e9-4fa5-ad3b-799c5c9555f4", "sighting--6b0f4742-5bc1-4384-b023-17e1388d0f39", "sighting--2ff81121-5611-4e94-bc88-6a42915dffd6", "sighting--6d9dd0e5-47df-4a62-af37-f0a7fff60f9b", "sighting--152f862a-0e02-44fa-a87c-4bc53b19e8cf", "sighting--2492baa8-8ca9-4460-9e80-87f7176d2520", "sighting--34d7dd6b-563a-4193-aebb-94dc8b96ea74", "sighting--01af5159-7f37-455a-bbad-428e682d6e1d", "sighting--17c361d0-041c-4fce-96d6-b4f77fa1ad04", "sighting--efb06021-8e8e-416e-8aec-1ef1d1d97d6d", "sighting--7975edea-2c8c-4ab3-9aed-b41b9450af58", "sighting--c6fc393c-a2f9-438e-af9e-62841b94d72e", "sighting--433236cc-bc62-4cde-896b-ac2216e094a6", "sighting--25d6ab63-0412-4d2c-9644-2a31602ccf61", "sighting--55cc7094-4782-4962-ab3b-d3b6ee9a9296", "sighting--df190bec-c687-4493-8c3b-9c56b2f14480", "sighting--e31cce90-e039-4879-ae18-099d7e954607", "sighting--f36a7ce5-1060-420c-ad78-e8b2f900af6d", "sighting--b6fb413c-91c3-4158-96bf-5ed374e78573", "sighting--f39ed3a9-6a40-4160-9beb-613bc791face", "sighting--97d4875e-4ee3-4e20-8d89-50a90485509d", "sighting--67b85400-6970-489f-ae13-7de329ce6f26", "sighting--a92ed052-c17d-482b-abd6-ef1711c5b9b5", "sighting--6dcd0933-2dd2-48fd-8234-de3e551e5f08", "sighting--5f173e01-8b63-4779-98f7-c7b325785c70", "sighting--c9adddd1-9531-4dec-9bb7-1741a4545ffb", "sighting--06535a4b-f333-4db1-9b76-513d9992aa86", "sighting--3227f030-2391-4740-8bfa-6d493f79ce7f", "sighting--1c9c6402-6d07-4ba8-a699-15a8b64041b7", "sighting--3440bcf2-eb3c-49cc-a062-37ed503d685e", "sighting--378749db-2cd5-4c38-bc59-ca00fe856ebc", "sighting--22a888fb-cdaf-4f76-acc9-c1b261da8d7a", "sighting--70f64d94-69cf-420b-80a2-a94728daf191", "sighting--fc4eb798-ac96-4f3b-8032-da8d1633d2aa", "sighting--96c82332-36ff-4b4d-98c6-b21bcfe74617", "sighting--47698217-bf0f-4e93-b04b-f1db482d422a", "sighting--6686304d-b6c4-44ed-9dc8-ebb2a64127ea", "sighting--5b5d5054-d56d-40e4-b938-cbdc6db2f43d", "sighting--1c4f854e-dc35-4399-9287-fc459ca217c0", "sighting--12b952e2-d1e2-4a14-927c-80adfe84c75f", "sighting--d21da9a7-a281-4930-8873-be2e5a411303", "sighting--1df7d69d-ea64-4fc9-86a6-ea7565f6b016", "sighting--4826e986-b13f-4d03-8e76-c4d699a462b4", "sighting--598c0cb2-89c5-439c-adc9-4b15da1e3029", "sighting--85fd7743-843e-4bde-ae2b-9bc524d9b2e2", "sighting--69a54237-5c77-497b-b6b3-7f34da002657", "sighting--c0cdbcbc-d501-48a1-86c4-eebff6efa469", "sighting--6d49ae9a-8e86-4d37-adc7-8f4efa891588", "sighting--403f2e6c-e3ec-4378-b782-1375e032e645", "sighting--d8c995db-1703-4ef8-b6f7-b2f0e5d98914", "sighting--79e2c9f1-b471-4a2f-83b1-f7a5e61c111e", "sighting--bb56fea7-86c8-4909-82af-11aeb72fe2fc", "sighting--1002b27d-00b5-4d01-9ab9-1adc0340c0e4", "sighting--d02b7802-0e55-4b10-a4f7-e14f5f5caabd", "sighting--e4cc0e99-5923-4618-a744-3024912c4116", "sighting--efda6c3a-6a23-42a5-9e22-df5b03f60279", "sighting--c13d4a61-5a0b-4a80-9549-a91bbf60a148", "sighting--67f89eaa-cc26-453a-a418-06af0775948d", "sighting--79d64d07-53c1-4559-9a9f-f17e03788964", "sighting--de0f7096-646b-4487-818b-ce32533058e9", "sighting--846c922f-5cf9-4bb1-9e8c-55e49e546c6d", "sighting--414cf7c1-3bce-4561-9f71-764adeb92f8e", "sighting--a7a57cfd-78fb-4489-9d1f-57b20d3f6a22", "sighting--baed8b3f-bdf8-480c-b28d-d924094544ea", "sighting--56d66d78-fcbf-4a7f-a52c-e20e2f9022df", "sighting--8a146d49-e122-45a5-94c2-fa3719b03afe", "sighting--b0d41581-4bbf-4ad0-878f-8a21aab46725", "sighting--a34674ff-8bf1-418b-bc78-adb015ce465c", "sighting--38bff6c7-82c8-4ff8-8bac-70e39d2a26a1", "sighting--841a0404-959a-4ed7-b972-5ec26554dd96", "sighting--e49da1e4-f575-4714-b546-e7653f568cca", "sighting--b51e5988-0ca0-425b-b714-59c8145f03a7", "sighting--af13cd14-be27-4bec-979d-f7137e12f69d", "sighting--a5a50245-ac0f-45e6-8d6e-1a5cb3ccbf09", "sighting--1ecf2e93-94c9-4460-9179-e5cb666db6de", "sighting--7420fdb5-ae4d-4eaf-8697-3f1284a48fbf", "sighting--09d6d678-76ea-490c-b4ef-078e11fb7ebb", "sighting--fbbb4b07-23cf-4d14-aa41-1bdb02f8dbee", "sighting--992c0f81-5247-426c-b8ef-57ef08b6f352", "sighting--1db3fd32-2866-47ab-8b59-9989e755c86f", "sighting--831e5748-bbfb-4176-8d58-f009ecb2edb5", "sighting--c9b97b49-70d5-4a2a-b264-824958b18955", "sighting--ecd4204c-d250-4c03-9e5c-ab0ad2ab9fe1", "sighting--93dbcb60-a8b5-4802-915f-fbe83f94561c", "sighting--0afd284e-aacc-4ce5-846b-58d9cb578e85", "sighting--d2619546-bcda-4ee4-9e44-72936130fb71", "sighting--5b92222c-2975-4e70-a047-c50c919d7c3c", "sighting--1e0c94ed-98de-4329-87ca-323937e13321", "sighting--b37d58c2-c702-4c5a-864c-64fad0418396", "sighting--a007babc-b286-4183-9ff3-0f2831b7eb43", "sighting--5fa4adf6-9940-4314-b688-882192b283de", "sighting--13f18598-ceb5-4bfa-bd2d-1db79520d28c", "sighting--25605d1d-f6a8-4abd-b221-1772355fefe9", "sighting--e3fa0976-0962-463d-ba2b-d8ce8d9792a6", "sighting--be69e3ab-a197-40a9-9faa-340fd4a92814", "sighting--c3cad5cc-8bcd-4b97-bb90-8302725b2fba", "sighting--1432e249-d9e1-486f-9945-20106bb76bcf", "sighting--3b0f682f-7721-4a20-8ea0-ef7bf5ebf47c", "sighting--1df6cde3-2877-49dd-8b7b-9841b0550f42", "sighting--fee18230-8e39-4b21-a7fd-4b84e5d37228", "sighting--918a0348-6dfe-44fd-aafb-5fadd3698481", "sighting--9132d730-6313-4cf3-9758-3d584f9f1f1e", "sighting--99e0f0f0-2425-41b8-aec6-59539d96f9ec", "sighting--45d675df-4714-479b-81cd-413a7d8400e7", "sighting--84d531da-e11a-4866-8397-72f97f080646", "sighting--cc839bcc-9e43-4473-bbfe-baf731b6b132", "sighting--3b391182-4cb0-42fe-9eff-e4b5d5ba7396", "sighting--09484a10-0ab2-4150-ab6f-e1b442dc95df", "sighting--260df388-7cef-480a-bab8-3e74c79db029", "sighting--97f63d7e-f214-4ada-b1e1-dab9836ae119", "sighting--77cae5f2-d184-449f-9f08-796c06819c97", "sighting--77d79320-b24a-45d2-866d-97b8628c080a", "sighting--023939e9-fd02-43d1-b2e3-796ed8aaef6e", "sighting--95d14204-9cdb-4fe3-b4ed-f53d5e9a7bd3", "sighting--111b83ee-e4e3-43ea-a6cf-8262f0c5a459", "sighting--f64f73d8-ef60-4a1b-a94b-d0d58713ecf6", "sighting--fb9740f8-a477-4243-9115-5c01c084fe45", "sighting--92547ae1-12bc-4886-a023-8dff7ce44597", "sighting--957fb7a9-f4a4-4359-984b-07dc06aab26e", "sighting--edc35181-4dad-404d-8d90-7bd4207bb59b", "sighting--7d5e8e0e-1d07-458c-89cb-ae6f5dff0304", "sighting--eb2a5011-b6b1-44e8-b29b-21aa45d3e513", "sighting--e06d885f-3e2b-48e6-a0d3-6ec6f9dfd559", "sighting--b11dc17b-8813-4e98-aa79-237e4bc077ff", "sighting--85d70465-20c6-4e16-acf9-b14415ae2b20", "sighting--b6e22fce-a76d-48d3-94f1-0c2b07454a6a", "sighting--7d1855ef-41ff-49f8-a20e-0107e082764a", "sighting--e4fbc4ea-2ad5-45f4-a680-07dae2b00d78", "sighting--0ae168e8-2a0a-407d-8435-87624a1fa854", "sighting--284f746d-f7de-4231-b319-0cd916a1396f", "sighting--6a876fcb-70c9-46ac-948e-dd73f3153b8d", "sighting--0e2c01dd-75a5-4b89-a273-e7858910266a", "sighting--8e770241-9d12-4ee4-9c2d-b5a0a3e8a571", "sighting--6c354e34-dbda-40b6-84f2-d4dd6b1b1fec", "sighting--80879f9e-41f1-4440-98df-082b979b7e06", "sighting--ef822d03-8017-4167-b1a4-e90a780edd96", "sighting--52bc540e-726a-4fdf-aef7-7557d76819ea", "sighting--1090a5ce-e8f8-4de5-ba8e-14abb3075f41", "sighting--ee3cec9b-ba1c-498a-a539-f6c29c07fc61", "sighting--2afe69e8-002a-4cee-985d-c8a9a1262d3d", "sighting--4a73b698-b556-49fd-a104-1a2d155fe67f", "sighting--706101ed-0887-4ec9-9249-86ca39fc8c89", "sighting--0bb685a4-9323-4776-9b0c-956b467f2b4e", "sighting--0c05433c-4f98-401e-9ad9-2df0efd1c4c8", "sighting--3502ad7c-5c78-4169-9e05-d8e9012c80f7", "sighting--621720df-02a1-4d4c-85ae-1f77bcafe703", "sighting--4339e0b5-a441-4f30-8bf7-ba20565d6b04", "sighting--b54aea44-f635-486a-90e2-2a39da90f4b0", "sighting--cf94d220-119e-44b9-aff3-cefe70ad7436", "sighting--723ebcc1-71cf-48ed-92e8-414a27f2204e", "sighting--6b3a4b99-91db-4d96-9b01-bd56a95e2904", "sighting--8d14c825-cc70-4522-99c9-b0af9bfb48a5", "sighting--450a5f82-8b31-4133-945a-c563e7a8538d", "sighting--987d5d40-d3ff-41d3-b298-480f8c53547c", "sighting--3e1d4b20-2ac2-4f1e-b1f7-bb8b1bfd4237", "sighting--7aae654a-df5b-4c61-89b1-4d85aa3e69a9", "sighting--da07a4e9-a8ca-4b6f-a6dd-e5c8f8240f38", "sighting--fef8483c-a2ee-43b0-b1a0-caf0e0c29afd", "sighting--3e21f1c7-08f0-43cb-85cd-612fdc651b4c", "sighting--3fa8e4d6-519d-4f0a-8f40-dea4147559b9", "sighting--256bad01-3490-479e-8f91-44aaed6dd4a3", "sighting--e8482b99-41b6-44bf-8a15-a0a271a9b4c0", "sighting--4d01c3ac-ee64-4250-ad87-cfe776b561fa", "sighting--6465cdcb-f4a9-4ed3-8f0c-0f32a47ce1fb", "sighting--d25d087c-d271-43dd-9216-f61a4bf60204", "sighting--e4fdbf17-8f2b-4d89-b143-52c6f7322ccf", "sighting--d0a834b7-1d33-4143-ac98-00371c3eec1b", "sighting--335e24cc-cca9-40a5-83b0-8323d6d40679", "sighting--195d8f41-d89d-483b-a366-8aca84f36faf", "sighting--b0cf5e14-75ea-4055-9ad8-57a1bbcdacfc", "sighting--196635fd-ff86-4932-821c-c0c9ee8226ed", "sighting--3bcfa69c-103d-4c72-ab4a-fb9858123413", "sighting--ee3458d0-d789-4344-83be-ba5430341bf7", "sighting--251c96c5-6735-46c0-bded-f6270e87142b", "sighting--3633937a-7963-4648-801e-26a8f89f2705", "sighting--cd30d63e-bde9-4787-8ba6-252c338dfedb", "sighting--a953cb8c-fa66-48df-a88b-3548512e2941", "sighting--295ba067-370d-4d61-9118-7d1ec821459f", "sighting--6a2b5395-27bd-44ba-8f79-4dfac1718556", "sighting--24b78e31-ff34-430b-9349-3e9524cb7d38", "sighting--07a8c3d6-2d00-4406-af3d-3f99c01dd758", "sighting--2f1b0180-7c24-4ee6-8867-905b3cc6d625", "sighting--5c120437-289a-4d4c-942e-5c35699e9d4b", "sighting--5f861394-fc93-49db-9c3b-8c3aa5083d45", "sighting--0f8722d6-1627-4044-8d0b-0a85db9e6529", "sighting--9e2e657a-26e7-4fb9-8771-3fd862889408", "sighting--7daafa8c-3428-471a-b1ea-b0e6a0d19e86", "sighting--fda99292-9ad1-46a2-8e0c-ccbc9806a4a9", "sighting--bb9ba51d-a2e6-4725-b330-0f85a0c6b4e5", "sighting--d1627b1d-ac6a-4afb-8a82-5f47f7d0a8f0", "sighting--630bd225-3dfe-4b59-a372-473f44cddfc5", "sighting--c005cdc9-9a52-4815-b83e-ef678532e1f1", "sighting--806e0433-b9db-4107-aeac-cb78931529f2", "sighting--076a36ac-6f99-4e09-a8ab-c47c75fb9109", "sighting--7ff177b9-13ed-473b-a2ab-afbbd3f436fe", "sighting--ba498f4a-3a9e-4885-beae-c68eb41dfef6", "sighting--39add6cc-7107-4944-9399-77bb371d4280", "sighting--4b1c3ba6-da18-4d85-af3c-355002404cf3", "sighting--fa404ea4-49bc-4bfe-a226-57ac8a728530", "sighting--3f1c35db-e4fb-4b85-bc6e-079a2d3fc259", "sighting--392ad731-afc0-40e1-845d-d43061c361da", "sighting--791a28c7-a429-4984-b2e4-0a192235e1bd", "sighting--4640b49d-ceaa-4edb-aec6-e4bf020e0159", "sighting--8ea80e06-72f2-4445-b654-ce9cf3a23f87", "sighting--b3461b6e-f326-4d3f-bdd0-6d16cc34dd29", "sighting--8b3ec38b-a08f-4172-8385-c708cb51e179", "sighting--d41ab9ba-0c00-4475-a0a7-366171196794", "sighting--9ef84e2f-5ecf-4169-836b-f0f58103a4d9", "sighting--4fdb7fcb-fb42-4309-8fb2-bd10b5497ed9", "sighting--9f26806c-fd81-4e4b-bf27-7a2cffe86bd7", "sighting--68c32bfe-e080-47d0-8539-bdfd1085d3d6", "sighting--1f625d0b-a487-420c-ac6f-2a5ee760b8f9", "sighting--c3498d53-148d-4bf7-9047-667676885ef9", "sighting--0affca19-ce61-44ee-a0b2-836b3b962624", "sighting--c1dfda5b-63a9-4876-82f9-28aa7f39959b", "sighting--813fbab9-5849-42f3-a357-1d69b7fe2d0d", "sighting--b51ba71a-15cf-4e71-a2fd-dc99aa9dc25b", "sighting--1382f6f9-020d-4697-b8c4-f830ecbe6974", "sighting--729a4924-4162-40d4-8264-44a4130c56ca", "sighting--5fd5065b-a5c6-4eb3-bdff-fde5f0e66aad", "sighting--1fa938ca-7fbb-4d5b-9953-d6882f63c41d", "sighting--f84b82a1-04bd-499e-a700-f95c83e52b4d", "sighting--3fa35d72-3c17-4d85-b0f0-3d4a8865a1bf", "sighting--f0de601e-abc7-40e0-98fa-725073a5522b", "sighting--c5764567-82a9-4633-a527-449569b810ac", "sighting--ef800ee0-bb3d-446e-9d45-cc237b16bcd4", "sighting--174d24ac-3fb9-473e-be92-38bd3437e6f8", "sighting--d43a9302-132f-433a-b29a-173b007ab49d", "sighting--d79832c8-b8de-45f3-a2a9-d131bca9f06c", "sighting--4d646a8a-06e8-4862-82e9-a75afaa250c3", "sighting--e3bf3a47-20dd-4b46-aeb7-75500a6a5892", "sighting--ccd45cfa-4b63-414a-bcb7-ea76eafa2f84", "sighting--2200330b-af22-47a5-bc7b-472d528f9cfc", "sighting--c260c816-ed3e-4b73-a6f9-3656f508466f", "sighting--caec77b2-8e66-4057-9d93-f1884715b0a8", "sighting--f0865c3b-5d8d-4ff5-9901-ce90ce5d28bd", "sighting--659f7280-6961-49a4-8b1f-0bfb78807887", "sighting--21c1f455-6269-45a2-8734-66343dbffb55", "sighting--85fd4953-3932-48de-9c30-25f10f594ccd", "sighting--97cbd948-8a01-446a-801e-10c7352363d8", "sighting--9bb91594-490c-485f-b506-7af0a796925c", "sighting--f6056d6d-850a-4f28-a6da-76275186dc84", "sighting--7699629c-ec5d-4d62-bb37-145d2a86f0d0", "sighting--e635423b-8787-44ea-ab45-942e584cb7a9", "sighting--38e18316-32dc-416c-ab37-8c133363268b", "sighting--c2bc2cb5-b73c-41e2-8eb8-1ce15aed8129", "sighting--160b87bb-5caa-4b50-ab72-0503801d6b31", "sighting--e75fe2ba-9093-42a0-9306-a248e029ab6e", "sighting--777b50d7-0129-4b0a-94da-53f0649d23d7", "sighting--3b4efd35-45ab-482e-959a-36c9a58c865d", "sighting--f94c2bef-a1c0-4022-b042-6984968f0acd", "sighting--8ad3bae4-1fda-4499-883b-c973417e635e", "sighting--0ab2e44b-bafe-4186-96b4-bf8af107c175", "sighting--2205c295-7103-47f2-870e-e28550f10f88", "sighting--8a82b085-1ebc-4b06-9cb6-56ae8206a9b2", "sighting--0a211269-9d5f-47a4-9225-b08545686503", "sighting--dbf22319-6267-412c-acf3-eb65cb90bf50", "sighting--25c9053e-fe71-4c8f-ad39-6b9e795a28cc", "sighting--0fc0d570-62a7-4436-b701-68e2a36eec04", "sighting--267caf6d-7768-4291-a3c6-f8338e63ce6e", "sighting--7698761a-2bd5-4c7d-b866-4e7fabb9734a", "sighting--39d555da-a338-43e4-ae0d-0955e6b6ae01", "sighting--be147499-98a5-43f1-9c72-e4b004c00d93", "sighting--2b3b3854-9fef-4110-bb6a-07209564ea3b", "sighting--28890a65-388b-4e48-8e75-93df64c2f3d2", "sighting--69274edf-2505-4f1e-839f-f6317024192c", "sighting--b3c499a9-80ff-4ef7-b9f1-51a94a3a2a95", "sighting--f4e18945-d7bf-497b-9cb7-9f8f0fd34126", "sighting--9b9f4ef3-06d9-4395-be5a-ca77bda73d70", "sighting--18fb0e50-8efb-42a9-8a71-8b534c31b3e8", "sighting--ead67e2b-0098-4da9-9077-6982bf882fe3", "sighting--1b38b5f5-f912-40f9-a9d0-e739ee7fc863", "sighting--530ef793-b37d-47ff-9025-55a3fd69ac65", "sighting--70704e7b-cc82-46be-9dae-707a31b1e28a", "sighting--bc600a14-620b-4835-bf9e-ad996caa97aa", "sighting--939d8120-88de-4567-b6d8-4e8db48041f1", "sighting--e737ea10-8e7e-4b0e-bd7a-c9550da37f11", "sighting--9bf4ea38-10d1-4928-9765-c4878601682d", "sighting--0ba07988-f75c-45a5-baca-22da79e9bf84", "sighting--e91b26a6-a55f-49f5-a13d-8a4e2df794ab", "sighting--4d850ae8-8e5e-4f22-967d-cbf17233ed9e", "sighting--b108cdf7-9b94-4076-acba-f93799fbbe60", "sighting--0d2d1663-2a18-4a4f-88ba-dba905753385", "sighting--7784a46b-55f7-4bd9-93f2-d411a36e7909", "sighting--bed96bfa-6b05-4bb9-acd0-df58a6bf0b76", "sighting--948b40fb-3fae-40ce-afe5-1338b5ba7092", "sighting--585f8193-3463-4278-b9d7-7aba028390e7", "sighting--ee5d7465-5996-4591-a7de-7c0a2c0cfbf2", "sighting--b67e20bb-fd06-4a92-877d-c97105e5f8c1", "sighting--2e309728-053c-44d5-ac84-44dd8aae9f97", "sighting--583d1676-d4f0-48b3-a48b-0784d38538c5", "sighting--e1c2ed4b-05af-4582-a6e9-ff002475586e", "sighting--39b7241f-07dd-4fd3-8790-3dda99258064", "sighting--e238c77c-692f-4134-937c-a00695fd860d", "sighting--ade53e80-ba37-4f31-ae9b-d5670b6b846f", "sighting--be31182f-7b7e-425c-8b13-28130e58ae02", "sighting--3cd66f95-04f6-48ac-922e-5a72ca66aad1", "sighting--b06073ca-9e5c-4665-9640-3d99f7a2a196", "sighting--1a1f8536-c555-469c-acac-1f023b990f7b", "sighting--02de4d39-1c8d-41e7-8836-eab9abca9b5f", "sighting--b4ef2a88-0e55-4c1e-b798-4a7d274edbf8", "sighting--ae2cad64-7721-4acc-b26d-5c23ca050123", "sighting--f656a075-8e23-4d95-955e-cd273eb739cc", "sighting--7d0d9532-19e2-4bbe-a5f7-15e617dfd773", "sighting--551600e1-68a8-4607-95b0-2c879a04b45a", "sighting--b61151cd-4491-4ea9-b0bc-0c14c7fd4a67", "sighting--36338552-e4fa-4b54-973f-4146499c20c3", "sighting--92131904-5daf-4c2c-9319-2c97c2ab0ff2", "sighting--1a6a1816-69df-40b0-a062-ed9dcaa7b95e", "sighting--3ddf858e-ca7c-4c73-acaa-b14d023648dd", "sighting--05f64390-4176-46d9-8074-5e440f80c4de", "sighting--f07fb460-773f-445b-a7c9-25ecc9c9aee9", "sighting--d4c9f0e3-5dba-489f-8841-df5d2c8b0500", "sighting--46ee659f-1895-49d4-a273-30a57a643313", "sighting--1b7e60e9-f6c7-4b7c-8488-6b0a2b08babe", "sighting--951b1866-2682-4b9e-9a3b-d838ea4dd637", "sighting--d0770e76-afbc-4173-937a-ba42a77bfb0e", "sighting--f84d659a-0a90-496b-bf0b-b2eb427d18db", "sighting--d6bce39b-d774-4542-9b3f-61f6dbf2791f", "sighting--37885210-1fba-4566-b6f5-e1338bac4d73", "sighting--a1ed4ede-6159-412b-9b57-1b93726913bf", "sighting--0e27edd5-60a0-4701-8aff-e35407749ac7", "sighting--67e4744a-57c2-45f5-9262-eaf770ef79ff", "sighting--197152f4-7a63-470e-8261-6dc23b79998c", "sighting--f9cc5ecb-22ce-4cec-acf8-c56ab35af47b", "sighting--ca5617ea-91d9-49b1-9b36-8b42e9b73b91", "sighting--9ed64e0c-3782-4285-a3b1-df8901e84c3c", "sighting--24e08a14-77c6-4145-8bd1-81b6b6eb2c80", "sighting--5dcd6332-8b2f-4d92-9255-d6b272b4c925", "sighting--6b810a99-4bc9-46cb-ad6a-7d66c866e071", "sighting--77845c92-0b86-4780-b703-b3dabc963b40", "sighting--6de3f1f1-aee8-4eea-b642-2c7b0c4c1160", "sighting--d3323743-910a-4420-9298-e1ca1ca0971a", "sighting--b26796f1-a0c0-446c-a80b-ed701f8156c4", "sighting--44b44cf0-b601-422e-8bd0-9bd6e5756a6d", "sighting--2ee9b42c-85aa-4f6b-95a7-4ec8897d0ecf", "sighting--1f763cb0-a6cf-455f-96e5-9810cd96f627", "sighting--579fd288-daa3-48c5-9653-7767d4640e13", "sighting--dd948171-e839-4fbb-b8f0-c2b9de1d6cc8", "sighting--e556559c-8f6f-4499-ad57-075479419e2c", "sighting--f5651d49-71fa-4a1e-98f4-e2735f71f6bb", "sighting--326b1c23-7a5f-4230-ae21-7e237c6e1167", "sighting--767f378f-09d5-487e-b849-8c16af4d0e8e", "sighting--25edb80f-1fb7-4040-a4d1-9ec891f355b0", "sighting--b41a17ef-c7ee-488c-a7a6-415162598aac", "sighting--8c192af6-d0b4-4bba-9544-3c7e31d90d62", "sighting--9b8a85f6-97e3-4554-927d-6386826f2b0a", "sighting--ad98a620-f87b-4dab-b77a-4108cccede2f", "sighting--bf68d0b0-c004-4a04-8d1b-eae8968d4862", "sighting--a4ca1207-2318-45f1-8e7c-a3bd479f50f5", "sighting--e574b939-346d-4355-ba6e-f081988cba8f", "sighting--27ad25bf-a5fe-4e19-aba7-81011a4516b8", "sighting--057daaed-658a-4632-bacd-351985b6a28d", "sighting--ee8aa4d4-c68f-4b44-9556-90bbf40cdea8", "sighting--0485c88b-0669-4b56-943f-3869ec0a2f9a", "sighting--d822401c-9db0-42d0-b81b-39b39d02b732", "sighting--70c94e57-e255-4b0b-8612-0d3def91c266", "sighting--24ed54e2-63cb-4225-962e-0a5af2143947", "sighting--c904eb21-557f-4184-9410-52892303ecc7", "sighting--3d833615-25fa-4028-8d5e-c2b8af5a4101", "sighting--7c92e8ab-efe4-4d8b-9c2d-88d5924b1e93", "sighting--5c8fae68-3bac-4e4e-ae61-d80def58bddd", "sighting--4d0cb4ef-02e3-4066-9a50-3e05c34b65b4", "sighting--6dc64581-5464-4b82-b0cf-e05781688371", "sighting--d61a7d8c-8390-4261-ac48-eb0d90034375", "sighting--70a209a4-e2f7-430b-a39c-75cb73746a5d", "sighting--bc1e323c-32e1-4f4d-a48d-8bfa0627fb71", "sighting--1960e654-7cad-4bdc-8666-449c5ea3bc84", "sighting--2c9ca39e-6d65-4262-be7b-3e6e6fdf5cc5", "sighting--866b2be3-ee8e-41c5-bb0e-23b493bb4fdc", "sighting--13dc450b-8ab9-46f1-836b-ccede034fea0", "sighting--308600a1-9c02-4350-869d-e034dc221231", "sighting--bad833e1-f4ce-4eb1-81ad-560bfd5d75cb", "sighting--09916983-2532-452b-9e60-dda20c48de36", "sighting--0e9355de-20b5-4dcc-ae93-92678b846100", "sighting--08ea94d9-fa70-481b-b28d-ba3a395a11b0", "sighting--c4ed7cd8-71eb-4856-89b6-6ce881997fd0", "sighting--da0a0593-8dbf-4b9d-8efc-64a5517185a4", "sighting--d38e29c3-ab73-40a4-83b1-689ff92c706a", "sighting--570dc8fc-7cd6-45e9-96b6-1e3be516099c", "sighting--12052263-0672-4570-9580-cd00320a7902", "sighting--8d83dee3-b31e-4dce-91b0-23000dabe356", "sighting--497a66a4-7ffa-4863-a5cd-854d6c2e151d", "sighting--870403ce-cf95-4de1-a94b-79135abedc26", "sighting--61898b8d-5611-4174-88cc-7b3f74427dfe", "sighting--b69737d0-0693-4739-a0b1-854036fcd70f", "sighting--95901559-01c3-4786-9ace-9371778e0493", "sighting--d526568b-1f1d-4da3-84f5-77f064864d32", "sighting--d0221074-1e21-46d7-b04b-41d973461572", "sighting--db7f08d4-81f8-48e7-a052-1843b6930241", "sighting--c9d50952-b797-4de7-9bb0-95d641940833", "sighting--36e27d89-5c90-40b1-aac5-3a76a92884f4", "sighting--8e634b73-bd88-4586-a68e-3052d9b198f5", "sighting--2a1e5398-e6f6-4dc4-adf1-1a6f8c0a93d8", "sighting--e766b1ac-6754-4032-842c-ca540f480f25", "sighting--15ecc912-0f28-4cb1-891e-1845cd449b1c", "sighting--a35ca597-fb75-43cc-8d31-8b93ad37de64", "sighting--1f47bc85-0451-4304-aa59-20f605f07e44", "sighting--3d46f132-0337-42b2-8d73-969e49b6c858", "sighting--cb69038d-0def-4b0c-a2d3-204c88462a5d", "sighting--7c551142-7f41-4d43-b9ad-30b494580987", "sighting--997e18d5-0f0d-41c9-b854-3cd02e1e5f0b", "sighting--ccb94a40-9080-4acf-9089-29d58ced7cb0", "sighting--55d03271-e29a-4e9d-80d4-648803ac6fe8", "sighting--e14049de-7aa2-474b-93c0-179cb93e2fd0", "sighting--a966ce6f-0ff5-434b-a9a5-345d6d90a719", "sighting--8f95b31c-6b95-4524-b795-aaaeeab7d05f", "sighting--b36a1a94-7dd0-4ca0-8e50-e7625e6c7b3a", "sighting--06ecd8cf-40f8-40da-9057-74d46ef50181", "sighting--24147eec-aef6-49b1-ad91-69247654f9aa", "sighting--a1fd6d6c-85ba-4a2d-9eb6-f005c064d7f6", "sighting--8ae4b757-8b9d-41dd-8854-5d538069b73f", "sighting--ebccdf0c-f95a-4f0f-beed-63b88d2685b3", "sighting--3d6af415-ef74-49ba-a78a-60ac8d4ff991", "sighting--fe32e3fc-5fc7-4975-bff3-1ea1b2e2feda", "sighting--7a32a878-e551-404f-8380-0d4a93d70e5f", "sighting--377ed863-5d77-412a-bb31-4df2debc28ac", "sighting--aa2efa43-f807-4483-aa0b-600d58a34021", "sighting--aea438c1-a029-4ccb-9e1e-2595e55d00a6", "sighting--c1a2558d-3a50-4196-88d0-53fcfc2ca92d", "sighting--54fcd9fe-ff34-4735-8172-95c768ecdeee", "sighting--0c165871-7fbb-40ea-aff6-9a379ab6eb3d", "sighting--e6c58c77-6898-44e5-b9bd-2750a61c5bbb", "sighting--900ffcfc-7017-4ef2-9dc0-1dbd88e49220", "sighting--ebb3d675-8fe0-4500-9ebc-61299bba48b8", "sighting--09ce7c05-63e3-46af-8f14-1bf33201d906", "sighting--9c0e8628-9f6d-4f90-a138-91085d84d868", "sighting--8063c63a-a5c6-4d37-b733-3f2e240ba766", "sighting--98849698-1179-4c94-971b-14c5467c2448", "sighting--0c89e14e-15c8-4429-8c83-ac94ffdaeb8a", "sighting--a4752b24-0fd4-4a32-8ff8-2bfb3ba2a82a", "sighting--e986831f-abab-4fe4-b9f0-a6bc11e2ff01", "sighting--7960513a-87d3-44cd-a9f0-1c3cf61c141c", "sighting--fd4a300c-7208-4569-8085-40690f53eec9", "sighting--6ce502ed-33a3-4256-a72b-2834c5fcd53c", "sighting--bebb3e49-edfd-4709-8c4c-c24a2ec4d1f4", "sighting--21dac455-f4d4-40c9-b40c-534699c88384", "sighting--b700bf17-328b-4fb2-a618-2ef182187c00", "sighting--5f35fded-8cce-439a-9a60-419a34429c0a", "sighting--9e8b7535-d75a-4407-a4a4-1bad4314cc43", "sighting--31143159-838f-4a97-8562-12ab3e6a2316", "sighting--5e270884-fa23-4d43-a771-8ccf088595cf", "sighting--cd2cd86f-b1b4-406d-a974-78abf1cd13af", "sighting--d6c767ae-dbe7-43b4-95a3-0d40d7022a1d", "sighting--38da176e-aee8-4ed1-af50-6b05abdfa024", "sighting--8f7fb0dd-44d4-4b30-901c-d780cd0446f3", "sighting--8820cc79-6249-4243-b1d5-819ffcdbdefc", "sighting--0bc6cc20-0d11-466f-8634-8aed809c0c51", "sighting--c45696a7-3b93-4852-9834-db8be006b3a6", "sighting--077ba802-2576-4e90-b629-2a8a0b0a13f8", "sighting--3a4cc360-e8d7-483b-a16a-d4b410b78d8d", "sighting--80acd5c4-4c59-499e-ac34-76aab57e3992", "sighting--90f9a4a0-1585-4d1b-92b5-bbc4b90a6c45", "sighting--0c7896a1-060b-4922-a601-898c9e4206fa", "sighting--f516c8b1-31ef-4b38-99a0-908350a43c3e", "sighting--878d8c14-fef7-4e8e-89b3-a3dadd689a9a", "sighting--4309ecf4-13f3-4dc1-99fc-cb204be07d87", "sighting--121f4261-55fb-4b2a-82af-1491e757fd29", "sighting--cb61f1da-f80a-4aa8-a4b4-532e9f2db0f1", "sighting--779df74a-b806-42a1-8ff4-46e2120d6e48", "sighting--62a1d1b1-29f8-410c-9006-01aaa52d4883", "sighting--d981d9f0-9abe-44fa-a046-250edd7dffa2", "sighting--9691b096-e67a-4bc0-a2c7-3f267243ef5d", "sighting--4d2b1357-138e-4906-8b75-ec8d897d4181", "sighting--9ab91222-b092-4017-8556-df3add252797", "sighting--1c704987-7976-4b9d-a4fa-f6fb4f4bf45e", "sighting--43d59d27-ec07-4346-af6b-8d6396506a45", "sighting--ad0dabc4-2c0d-4161-b7d6-18cc8f2abfe3", "sighting--757cbdb8-b136-4963-a03f-b0ccd79f3d93", "sighting--766f67ad-7dc6-4982-b264-ffdce54846fd", "sighting--cfed5da8-b0a8-44d6-8956-53a43e6160b1", "sighting--0b353c97-dba0-4eef-a165-58af88111d25", "sighting--c8ddd6d9-c4e5-47c2-8db0-80c4933c7ea9", "sighting--6a171bd4-69e3-4ffd-936d-fd59529fd045", "sighting--8132c78e-fe93-4553-be9d-f2ec187cc361", "sighting--28cdf3c3-f0c4-4228-9106-9b565b827b4b", "sighting--4bf20c6b-379c-4118-a48d-2f82f4a0adf9", "sighting--8c73116d-55fd-4169-9534-5ea6ba116ac4", "sighting--7137374b-7be2-442a-bb55-62f64c01878d", "sighting--8eaaf410-88dc-4193-9d81-23dd3ea04cff", "sighting--c6632dfa-2320-48a6-9555-6dd972793974", "sighting--d9d7cb9c-57b3-46e3-8b0d-56c6e4819df2", "sighting--7b28cc6c-f3ad-41fd-997c-372e449e8669", "sighting--b9dfaa0f-2800-4bd3-ac08-53858c4d1cef", "sighting--4c1149a0-e27f-46fc-bf85-d83521877f83", "sighting--da636d28-7bcd-429e-9de8-fab9e7a7ad2e", "sighting--6448af99-0786-4b57-98c3-cf3335608b78", "sighting--9501bdba-91a1-491d-acbd-4b4b732efc4e", "sighting--6eb11877-1727-4fd8-bc97-71088f205af7", "sighting--b8e1a5b2-db9a-40d4-ab4e-ee8283822909", "sighting--5adcbcbb-ce6f-49c2-97e5-6bf135f0dfb0", "sighting--62bc6e8f-8d2b-430a-8c51-1c0c0401428e", "sighting--872fad76-f544-4077-8792-fe343959b3b7", "sighting--1f911cc3-72d3-4fb4-b245-e1089167db25", "sighting--03a90bad-8d42-43ca-9ca9-b89fa331f79e", "sighting--1b64b79c-1168-458c-9ecb-9c14cd12304b", "sighting--93bb0235-e03c-40d0-b9ed-7eadbaf8c1c5", "sighting--1cbe0d6e-b6e5-4399-b7dd-e81744a9f360", "sighting--8dea2157-da8a-4cf7-9f22-5cc1a5075fe4", "sighting--ca4fbdf9-44dd-43d7-894f-6024445ae8ac", "sighting--c7d9c25e-e168-414a-8f62-1d0e4ba5fc4f", "sighting--7d5f24e6-431b-4bf8-8dbd-5fd80adc1496", "sighting--298d0314-2414-41a5-a0e2-798af8f32732", "sighting--df85d2c5-5957-4759-962a-7b0e4f336abd", "sighting--13f2ec0a-de62-42ad-8c04-0e3194c2564f", "sighting--1e88830b-67dc-4d84-bfb8-a49db51db5b2", "sighting--8a3f4a32-0e20-40f3-9fa3-7be11f725eff", "sighting--600fd549-315a-409c-adaa-b0f3da8e30c5", "sighting--41ec4f1b-8add-4990-89df-5ed842d2676e", "sighting--8225e541-6f9c-4728-adf6-289d0e6b718b", "sighting--0e899335-266a-4242-a22d-4a74e11bcf8d", "sighting--48f594c7-820a-41be-a774-d155612c24cc", "sighting--4b0125a2-1b84-4815-8ea2-52b4118fb920", "sighting--566ec9a3-0394-4700-9998-ca067f83c328", "sighting--b08ce266-6af5-4f7b-8ec8-8ecc72d0145a", "sighting--e980b53e-0bb1-42cf-83ff-5ec37e7e6a33", "sighting--1af2a90a-8d4b-4064-89d9-506613eec706", "sighting--daafdc21-c5d4-44ae-af58-0d25e7ac0dce", "sighting--bae90193-efba-44f6-a0ab-dd00ad7200f1", "sighting--426361b2-1c49-47ca-a357-900b8d4ca73e", "sighting--fcf299cc-144e-49ac-b39c-4a3fe40de21e", "sighting--34f3a92b-8d31-439e-8968-1105845274c2", "sighting--bf948474-8eea-4b9f-8c37-d4d65da61c8d", "sighting--8b9c15ba-26fd-4914-86a8-e0fbda257831", "sighting--c1b92341-3351-4046-a1eb-eb9f053c909f", "sighting--89f1cc4b-4252-482c-868d-b52f9b2a540d", "sighting--2d5ad958-7f9e-4625-8fff-e452afcd8b7c", "sighting--f8a6d96e-304e-4809-b0c0-f5aac406eef7", "sighting--559d1a40-e645-45dc-aea5-89ca5b965f89", "sighting--abc06289-4f1a-49f5-8bd8-6a266b20a5f7", "sighting--8e778435-8e92-4bda-ab80-463449e1c186", "sighting--d6d7289b-7ad0-49ab-8017-aad1779afbba", "sighting--5feee527-bf80-4416-b1ae-2f78ce3afceb", "sighting--88e96194-1885-4f6a-a034-87597b235e61", "sighting--29ec3bea-9171-4edd-948f-614478a91fc9", "sighting--f55ac66a-1c7a-4856-be24-dbfa6e610a64", "sighting--943552db-37b6-4c69-a279-ae534c540ec6", "sighting--3492d0cc-8a66-49f7-a78a-dbb29f67d04a", "sighting--1c53999c-319b-4ac7-813f-1bdbe1e51a99", "sighting--5c9dff66-23ac-4535-a189-822ddb846080", "sighting--95a41990-ed6f-4f31-9fee-3562a4357b49", "sighting--47fadf63-fbb1-42c1-8619-3b0aef99a961", "sighting--927f31f5-a817-4c60-b77e-c035b42b6516", "sighting--ae9261be-3d44-4d9a-937f-d1d8ffd7ea0f", "sighting--62ebc06c-c12d-465e-9845-a1d6a4ac8999", "sighting--b6294071-b98a-4327-a744-f485b75e4e52", "sighting--26fb16b1-492f-4fa1-900a-d15eaa191ae7", "sighting--edb3af34-ee5a-4142-bd79-b4e40663daa1", "sighting--0e2af81a-f8df-4623-8122-26aa7a33761f", "sighting--79db5d8f-ee51-4ccc-aa82-11cbfa6fdefd", "sighting--bb4e03dc-64f9-4f45-9f48-db3d66f89ae2", "sighting--0fb72942-afe6-4b78-959d-76069657c858", "sighting--f50c9128-1fc6-4395-af29-319ce2395033", "sighting--43cb99ef-fbc7-4869-b48e-4c81f6b98fca", "sighting--8bf39c97-605e-4c89-964a-b2e9cafe9fa6", "sighting--90a240b2-57c8-483a-9583-fa32bc7ca725", "sighting--387c7a57-ec60-4c7f-931f-742177dc44aa", "sighting--73226893-8325-499d-ad8d-c3f55bb90940", "sighting--e706aff6-166a-425a-b673-35195e2d7bc6", "sighting--2e7f13e3-3fb2-465e-bb47-18c7e438a8a0", "sighting--a5806a52-7307-4076-8f3e-197c1ea61c8a", "sighting--4c962747-6120-4010-9ac0-21d147659907", "sighting--4f2ea528-6e8c-4966-a5bd-4b9cd576ae38", "sighting--3315fd11-2395-4c4e-95dc-223cb6a4df3a", "sighting--7d71c856-7246-45ec-86c2-8e9b2d415ef7", "sighting--9f267a73-9e53-4f2a-b195-15f2e4b68806", "sighting--d4d067be-34f8-43f3-8ea0-c9e45e2866f8", "sighting--87883944-5977-446f-bfc5-c019a29c7e0d", "sighting--7b1d406f-1cb2-4163-9dba-5d3e9f91b43e", "sighting--3ebed131-68ff-419c-90e4-d573b7a30cc4", "sighting--f5eb4217-7ef0-4841-be08-201c81bbce5d", "sighting--ac1b41ff-0cb5-4f7e-ba4d-dd322a38f811", "sighting--65022a63-feb0-4612-8d58-b4e9063a7111", "sighting--989521f3-a94c-476f-9413-b1a1c13d1ba4", "sighting--6b6a1397-1415-45d2-94ad-c2507a2cdba2", "sighting--eff705d5-bd59-4c53-a51f-a985f791b742", "sighting--894ef526-1924-4c3a-b006-f952fda15bee", "sighting--e1a0d78c-0c1e-4cd6-ae70-5e6b3890f823", "sighting--b93175b2-658d-40f9-9b44-9b6ae764216c", "sighting--17512152-9bdf-428d-b4c2-d6594c5e25eb", "sighting--3bbd0259-0073-4d65-91ff-94d6429aca55", "sighting--4527d503-6a2e-41cf-b2fe-8e9585260855", "sighting--fc5c66e0-de69-43de-ad2d-7a77248db685", "sighting--6afd60df-ef73-45a9-9eb5-4cd002628b9c", "sighting--c74c9c49-6221-4d32-9e6c-92c04b84b87a", "sighting--9c427649-77b5-4994-9e1c-17ec72b3168b", "sighting--98f4b49a-1b30-4cc2-9975-ec7edb427121", "sighting--f72783af-4ef2-4f2b-a117-8c69291f1ade", "sighting--c31bab7a-719b-4d9f-96dc-40ba73c15ab0", "sighting--17626eb9-0cfd-4b0f-9f90-8ec1d50af5b8", "sighting--92e81fee-5875-4a83-8088-b8ac0e74c962", "sighting--02d690d5-eebd-40c8-adee-2d2561127fc9", "sighting--2ea94dce-3d8b-4036-85fd-e4c7b55e42ae", "sighting--09a16901-3a41-4b25-ae20-08490c17cbb5", "sighting--d498e024-6c60-4ebd-80f3-29ecef215e4b", "sighting--4302341b-d394-4369-bafb-623e03db8f1a", "sighting--cc45ba30-8acb-4482-8893-378ecb95a8b7", "sighting--224ce44a-f30a-406c-910c-6a32838347eb", "sighting--6185134c-592b-442f-93f0-8377b5f669be", "sighting--01d5e63d-8106-4913-b031-6b6d16efa216", "sighting--396f860b-613f-440d-bbc1-aaced5e6483d", "sighting--2cb27054-063f-40a8-b181-e12813bdcafb", "sighting--9b2fb073-d405-40ba-9481-cbf94ab692b0", "sighting--4a57ab62-aad6-4fb4-a969-ae37fce3c5ea", "sighting--ff1a263d-ddfa-4d13-b639-e9587a759d59", "sighting--dd88cfbd-66f4-47ec-8c44-5381c3b5e92f", "sighting--8d577afa-9572-45fb-90aa-03e7d6178a65", "sighting--110628e7-576e-4158-a031-bfecd0678673", "sighting--c0b3fd53-94df-40fd-b062-99fd1967290c", "sighting--cd9818c4-1f70-4fa1-b8e3-de7837487b9d", "sighting--2c940df8-a4d9-46f7-b321-9c105f1bd490", "sighting--e27b935d-201b-4c48-ab73-95951d7f7591", "sighting--556362dc-6bec-489f-8721-5b7d7059d85e", "sighting--b6e8bfd1-3cd7-4f1b-8e3c-186a49ddbf3e", "sighting--8298f859-d95a-454e-b541-d263300ce7a1", "sighting--e6dd5fd7-b1e7-465d-b83e-7bcd60387ca9", "sighting--85cbdee7-4f30-4074-8c23-1d97886383b1", "sighting--ebc6aa53-4213-4f15-9759-031b8e074b35", "sighting--d1f5d01b-c634-454c-94f1-572c8d5079b4", "sighting--132f773e-5e50-4b7f-a7d8-2e221de8f962", "sighting--3db3e67a-34e6-4952-8d62-1e506169802f", "sighting--4713594c-0705-4ba5-8c27-36329812db6b", "sighting--38bc1292-40b7-43b7-ba55-32d0072f57c7", "sighting--ce742467-e2d5-4aea-98c7-590b9502c015", "sighting--904e9012-91a4-4eaf-b152-fa95b415dde9", "sighting--ad5a57d0-9235-4d1c-afb7-8e0b1c59276e", "sighting--d9ad916c-81c4-416f-acfa-0dcc3b13a906", "sighting--c90c52ff-bc50-4c95-ac89-873f95f8927d", "sighting--ff25d2e4-2656-41a8-a273-2f662f2b1cc0", "sighting--7602c438-1bc5-4206-87d3-e35e0ad03f82", "sighting--462b3a9d-20d5-48d3-a2f3-1f143c3be21f", "sighting--1be0408b-3f51-4697-a5f3-259b923094b5", "sighting--e3cba8da-3fef-42e1-9251-86fc59e895ef", "sighting--ef574d18-a218-45c9-9252-942455b05950", "sighting--27e3b7cb-e59c-4859-ae36-9006f43dca1b", "sighting--08d5c71f-29c0-49d0-80cb-2bd18f5117f4", "sighting--d09001d3-1d2d-4cb6-bea0-15dfda6ff8be", "sighting--927f054f-ed04-4008-8a40-3f0f07379458", "sighting--765be219-945c-4ea2-bb6f-f4d38a2d86a8", "sighting--7efedbca-7f0a-4822-ba0a-bde4bb5de7ad", "sighting--7e572db0-ab62-442d-b7fd-02cb9b6c5ce1", "sighting--e27a2115-0c0b-4d6a-a6a6-4f2f2e1e923e", "sighting--83f02e76-ee15-4289-87fc-427ca81197c7", "sighting--67b2b4a3-6b08-42f8-88a4-a5ee467dac20", "sighting--eaa887cf-6b80-47c8-bb50-4a2e98c6c00d", "sighting--d54026a5-38a8-4799-b103-ca100b478f3d", "sighting--39308b6f-9671-4a51-a719-ca011dff2ac6", "sighting--b7ea10f4-21cf-4f59-a06b-3c52f1f7e05b", "sighting--80ed8150-a998-4695-81af-ae54c5f8fe44", "sighting--548ad17a-b439-4623-9541-b920ed4e97e9", "sighting--01b7ceb9-98a7-4e90-8b23-23f639d508b4", "sighting--e93265d5-b5fc-4899-a2bb-f61c289367ff", "sighting--447fbc00-5029-4c0d-a2f4-2de0e8a58a9b", "sighting--b2704044-ee3f-4dd0-953b-9a3cd1f2a02e", "sighting--c1893b9a-5dcd-4bcc-ade8-02b4a30d6980", "sighting--a4df87d0-e091-4d83-b74a-e432b4e3b8ca", "sighting--9df35461-356f-402e-ae5b-db843afe15af", "sighting--6e7e2993-a0a6-4f9b-8b8c-f75f9f2c6da8", "sighting--093ac316-409f-4000-8878-77c269743992", "sighting--151f9665-bb1e-44c0-a368-5ebd663fad95", "sighting--18084e09-fce7-437d-845b-eaaa162cd797", "sighting--7974da29-b011-4bae-b1d8-b073d62f33e2", "sighting--0196230e-9bf2-41fc-a6f2-ba28308f7866", "sighting--46b490d7-ff3f-4e6f-b57e-405ba6d979b3", "sighting--cf9b7677-3859-4db2-b5ea-e76a8207b48c", "sighting--33f439fb-5b01-4515-8336-67ebade57906", "sighting--daf88a5f-33ce-463a-814f-f9f9d48648cd", "sighting--67f20fde-9447-489a-afcf-7f67ed80de7f", "sighting--fae56dd6-77e3-429a-a190-266e61b55250", "sighting--a8a2f5aa-d93d-4b74-a5e3-b10cffb15d54", "sighting--5894d79b-80e7-43bb-874b-7750d1ab3470", "sighting--111f9c1e-cc16-4102-ac96-746ba989330f", "sighting--95994f9b-882f-45a5-8f73-42472bd503f6", "sighting--42ec1eed-235f-4ba2-85db-09a0d019c406", "sighting--ceaed47c-c8b9-460f-ab93-9d917e2d9677", "sighting--239266a1-d5f7-4763-99e8-8ebab807c149", "sighting--aa7654b7-98b0-41b9-896f-f449bb8c179b", "sighting--68b2bba6-52ee-47cc-9408-5d9b84e14136", "sighting--23ac0434-8342-480d-b03a-586686abd106", "sighting--8866d440-244e-4a78-b1a4-c98810ec8f53", "sighting--eb2f07aa-8096-4e19-bcb1-f9a3bd949fa4", "sighting--eb95b3df-ff2d-455d-a731-8c200328b547", "sighting--6e1adb84-d292-4265-9f27-902c9d2926a3", "sighting--3e31b7a6-4aee-4cac-a826-c4c13d9230f1", "sighting--beab337e-08f5-46e8-a35b-374174089188", "sighting--43086943-cd2b-4af4-8e72-c3f7b84dba56", "sighting--db709d83-ab9c-4661-8d5f-ed66b412a07a", "sighting--9eb438d6-6cc2-4bef-a296-1894dec9ba58", "sighting--43a0cc3b-af75-4e00-9216-799bf1afbae2", "sighting--c0b0b1e8-590d-4359-b7cd-01fefcfed28d", "sighting--174b315e-be1b-42c8-8380-c9a71ac331cf", "sighting--03fede90-32e1-4645-b312-98618f833a4b", "sighting--05da49f1-83ac-4428-bed2-f79a235ff93c", "sighting--350358ab-6f64-46fb-98fa-dde07be6e16f", "sighting--f658cdbb-c2cf-40d9-a0e4-f4f577cee829", "sighting--306a7073-8e00-4053-8180-3e6af74b76c9", "sighting--c7b1982b-71c0-4908-9c84-ff9b4ddd884b", "sighting--7769078e-2582-4a4c-9219-dc94366e1f2b", "sighting--e41c3cea-7cd9-463f-b7aa-186037e8d8ab", "sighting--44582499-803d-40b6-ae87-6e38a0990036", "sighting--a8f44f35-39b8-4332-a21b-333758367fdf", "sighting--f5db2977-6061-4e0a-a1c0-700dda03636d", "sighting--ea65c687-e285-4d18-a727-8fdfc3042f8f", "sighting--5baac7c4-71d1-4c3b-905f-e965c4b59dda", "sighting--dbbc9a4b-6f1e-41f1-bcf2-ebdb3fd53ef2", "sighting--c0ecff31-3bfa-42e2-9312-9ca663b49242", "sighting--28ccf8c9-7742-486b-8f38-72721a8d320e", "sighting--b2352d29-2a93-4977-a029-c9e583ee9ed2", "sighting--31bc19cf-17b2-4084-81b9-cbd946c09197", "sighting--a1555d99-8e04-4f97-9eaa-4c43d6ea4872", "sighting--c93ecf23-405d-43a3-90b4-9e8fd63f5a5d", "sighting--e1f70776-965e-4aa6-9df1-6619e8d40ab0", "sighting--d14cb092-cf80-4eb0-a5ee-bbc975cf30b1", "sighting--cc47baaf-01b1-4514-b3a2-74e9f1619765", "sighting--aa56f35c-1ed0-42eb-99e5-c8902beb777a", "sighting--a1d50ecf-82f5-46cb-a2b0-f015fc053b94", "sighting--e40bd5d7-2ad9-46d3-916e-80249022ce4b", "sighting--399286bc-dc71-49b0-af0e-67a8992b68e5", "sighting--ca664b27-8449-4959-9730-17ea7ef71729", "sighting--1e0b6058-10c4-41e2-a121-af3ad6d996d3", "sighting--0f1c066a-1c1b-48e8-a81f-77ca664724d9", "sighting--6ce12096-9195-4a4d-bb54-fb50ae9a8d26", "sighting--732ea359-95f7-4607-ae5d-c2557bd610d7", "sighting--4d191d0b-928d-46a8-a80f-9a581580add3", "sighting--bb90a870-eaa8-4c3d-a84a-1f00b6398c56", "sighting--b9123a46-081c-4928-a7b0-f2b783552e2f", "sighting--a73974d7-0c15-4108-8246-7a7264b47c83", "sighting--1f5dca2f-85e0-4bf2-a8e6-7045b66503d2", "sighting--0ba04efc-7a03-412b-991d-6da7f8885a94", "sighting--b6d73250-cc36-421c-98fd-8ed700fa6656", "sighting--42a2c9bf-ad57-4a43-8031-6c0f40ad151b", "sighting--2562a8f6-c293-4590-bb8d-ecc0f593a9ce", "sighting--3f53282b-73a5-4072-b277-cf379b031368", "sighting--afb30ad4-105e-437e-aa81-5ab5dd36e02a", "sighting--2e01e504-bedc-4890-98dc-7f2aeeabd9c8", "sighting--b0a85947-f5a2-4b74-9a93-be078a86a7ab", "sighting--5207ae4e-be2f-446a-b9a3-61b9bd98d695", "sighting--5c8a9fe4-eae3-4087-bb76-88e23693f13f", "sighting--3de06265-cccf-4fde-8447-11e3add33197", "sighting--bfe8882c-0e95-4c40-a794-b3d13ee4057d", "sighting--96cdd130-e85b-4a2e-b5d6-24fe61aedf10", "sighting--299a4856-a1f5-459d-970b-f5f41e2ae0bf", "sighting--be50bcbf-382e-4fe1-af8c-15a76893fdc4", "sighting--42a7317e-9926-482b-924b-3444fbabcaa9", "sighting--059044d9-7817-4015-82c6-8fbe31967675", "sighting--2ed7934d-df1a-467d-88e6-3e1e9ae7bb84", "sighting--05e5f4ae-323f-441b-aebd-39069950b833", "sighting--3c64b3c2-984b-468a-a318-9b531a48e6f1", "sighting--3caf663a-fbc3-43bd-bf87-ef631d0ba098", "sighting--e29b8b00-35e3-46e5-8fc7-d9c916f7da44", "sighting--79074f9b-7ad2-4c0b-8e83-62fc7ab68346", "sighting--086c2414-bc6f-4276-8a24-5cdb5498f176", "sighting--71a4ecae-3014-437d-9269-cf91f3420605", "sighting--d609e4f5-8cdc-49da-a375-ac988b03a594", "sighting--53773cdf-7def-47e8-b5fa-0746d5668d5c", "sighting--13aca3ab-e4a3-4612-b7b3-a35e1d4e107d", "sighting--03f19c12-43f6-4a1d-8e5c-d09a2f70d913", "sighting--8b83d760-64a4-446c-a52e-f9bfd7f80295", "sighting--d60c6bd3-d0b4-4964-a030-c0729083c475", "sighting--ef398d23-4ff5-47eb-a17a-5cca5206e8f3", "sighting--72134715-3227-49ef-a75b-58e75a09e37e", "sighting--713301fb-8ff6-4abd-baeb-17a334545d91", "sighting--b6929b49-e2cd-498c-9bba-df4db459d527", "sighting--9a0520a6-0e8c-48a5-9a12-6e65d10d9b29", "sighting--287f4e2a-8086-43dc-8c97-96bf1dc559a4", "sighting--a7d0202a-8847-4a37-aee7-49946fe9b9a4", "sighting--a6ec674a-d2b1-454d-ad73-6af90dd5f4e5", "sighting--46d9f40a-af60-4968-94bf-d1c50227dcfa", "sighting--6149e56e-ed37-4ea4-83a6-55084b968838", "sighting--b4fd39cd-d98f-4657-9f99-e501eadc43c1", "sighting--32bc9b26-e484-4b0c-bcd9-7d1b6a47d1ee", "sighting--77b62ab5-81ce-4b4c-8b7a-5ca8e3690bfd", "sighting--4a4c9f85-1db6-4138-bc9c-89a9e263630a", "sighting--3397e2f2-ad1e-420c-a741-98e3e578a522", "sighting--f6d9bc9a-aeb6-4a67-b27b-5a84897c64a7", "sighting--6d288530-7602-43c9-b28d-b31f3646724a", "sighting--b5cc2809-1b25-421e-a6ba-7f38af53aa9d", "sighting--2c94b926-716b-423b-9192-4bb9d87e74b5", "sighting--39338493-b155-4fd8-8d50-d97acb6f2226", "sighting--97ba0ae9-d356-4daa-8e69-8dd51fade7fc", "sighting--0f10d037-5e23-4692-888d-d75493125a6b", "sighting--793182ac-cc56-467f-9db8-517601113b97", "sighting--6b199bbd-7dad-4401-a49a-5e2f53a036d7", "sighting--85df7969-d9d9-4ceb-9a47-20d49d857ecb", "sighting--90fafe38-e152-4dd3-9032-23b75e370bd4", "sighting--26f2bfdd-714a-40e6-a0b4-9e53439f64ab", "sighting--5d5dbd68-618d-4759-98be-d45c20f3b90d", "sighting--aca68618-a41a-431f-8bea-24e395982b35", "sighting--2fdfd017-e9c3-4f31-af95-fa6b00bdfb34", "sighting--a21b8323-f9d7-4c0c-ab39-d9fae485b545", "sighting--58b52ce5-c93b-46de-962e-bdb837242a20", "sighting--a2a951cc-6909-4dda-b675-020bb30c3d19", "sighting--3a4123b9-153a-49c2-84f3-d71da1c0e420", "sighting--12007835-9141-4e23-b96e-7479c9477ea0", "sighting--0547bc7e-0049-46db-8fbf-25a4673d002a", "sighting--e3d63cec-097c-43eb-b451-1a2e04139cd8", "sighting--f193f094-021a-452c-8936-02d2aae5f096", "sighting--b8c2d7eb-c702-4660-9150-d87680695e9e", "sighting--c23949e9-f0d8-4040-bcaa-d29c1dce84ab", "sighting--217cd513-c1d7-4564-865f-6504c947cacc", "sighting--e4725ad5-51cd-4b35-8ea1-fb1c9852bbd8", "sighting--47f0f4ad-78a5-4d1b-81da-baf415356cfe", "sighting--bdd23dd5-1a6e-402b-9950-884f09760993", "sighting--21eac8ab-2444-4d3f-aa8a-f33bf95247dd", "sighting--262318bb-ac6b-4878-964c-efc11ecb5b85", "sighting--3159f74f-749f-4afe-bdd3-18cacfd3003f", "sighting--72e47383-d1ab-4715-86c2-32c46b764bbc", "sighting--14fb3a0d-c9a0-4208-9e60-dcdbfa38d254", "sighting--4544d21c-6c43-4914-9208-ee153d50e130", "sighting--1c21f063-937b-487b-a4b2-156463aab4b5", "sighting--d2441a5f-a4e8-440b-b908-9a1b0533b58c", "sighting--8f0b541b-e8f7-4fe4-abf1-0006fd4bf7a3", "sighting--3a9471d7-d5b6-476c-8df7-80e9c4759b13", "sighting--a636d7eb-476a-432f-9a2e-25039a5415ee", "sighting--fe086cfe-dda1-4722-8c6a-14afa4e55c9c", "sighting--dd080d1d-c230-4669-85fc-ef2103bb16f9", "sighting--75de84f7-0f1a-46e5-aac1-e9786f4dc574", "sighting--546da6bb-f89e-452a-9a17-e81396ce62e3", "sighting--66200b72-9b34-43ea-9fe8-fdfaeedb8dc6", "sighting--fff80e09-2e6b-4376-a23b-2e3d199c03dc", "sighting--2fd5e7a4-4aa8-4a27-bfbc-cd59fb24585e", "sighting--1f6c8e20-adf2-4f4f-9137-e0202ac5a023", "sighting--781297a0-94b9-4e03-a867-f75ca91b62f0", "sighting--6565c943-0f55-4242-885d-48489664e278", "sighting--78bbda78-6021-4146-98d2-3df880e26432", "sighting--e489391b-14f9-4111-b75c-6498d90ec5e2", "sighting--87bb0c39-db11-4af2-b566-a691e4b499d1", "sighting--2073248c-64df-438a-8265-16d4285512cf", "sighting--f5816c7e-3f2c-4c3b-93c7-1722cb3ab96e", "sighting--899fa76b-785f-4e37-9ebe-dd2504b2e000", "sighting--1e83fbee-54cb-41ae-b0b8-728c225f08cf", "sighting--f1b9e26e-9cac-49cb-8c63-3cf30cb49120", "sighting--eb19e684-7c01-4a6d-8966-119bae11bb87", "sighting--94d57f70-8d20-421e-96c3-ab8e8113c9ae", "sighting--5eeab786-df01-4d9c-99cb-2e1c1586033a", "sighting--54a838e7-1dcb-4575-b43a-da1ab010706f", "sighting--d7197a9f-2d17-4785-87f3-d50e55987b7f", "sighting--3c78b5ee-0c63-4d2c-b58e-4470f5d1ca71", "sighting--0229ca09-5603-41a3-aa56-87a3917370a4", "sighting--55119473-1f0a-4a4a-85de-6b8b56996611", "sighting--f0effb63-6acb-4bdf-8fdd-19fb161e9c36", "sighting--ae00d993-0772-42d3-b65a-81c40b4afb54", "sighting--a6434905-eab0-46dd-9e6c-3163501e142b", "sighting--89b83ef2-5ebb-4015-b525-988ed4513047", "sighting--d8c977ce-1ebc-4588-97ed-c4e46197a8e3", "sighting--4cba366f-b179-420f-9ca7-391b721e684b", "sighting--8df46364-ac4f-43f3-9007-c126c52062d5", "sighting--6b0c701b-8db0-4850-adb2-5d6ecec0b44d", "sighting--8034c2b4-76dd-4d5c-8bd9-0478e5be8bd3", "sighting--04d5958c-23e4-494b-99d3-34fa4ee248e2", "sighting--f87f3257-5aea-44a3-a82e-ab2dfa6acba5", "sighting--8140c2fd-24a7-4d77-93a3-df6e6b96b82f", "sighting--80b58849-e9db-498c-a21c-8c7dc21a0bdd", "sighting--aac9a2e6-814b-47f9-9226-abb94b5596a5", "sighting--3b5e7798-f3c2-4d3c-bb27-d130b6ee6990", "sighting--acc69329-98c0-4046-9b9a-1b178548a720", "sighting--4be2d2b2-bfc2-4bb9-bd62-57b0e24dd2f5", "sighting--f3eeea85-7863-495f-b61f-019baa4e6b63", "sighting--d2933581-5743-4f1d-9114-8ed2bc2d5af5", "sighting--f48ed0ca-3c30-4168-aed1-b182c293f3c0", "sighting--b0c3eabb-856e-4fb2-9031-a957c4f440ea", "sighting--47c49773-1d84-4a34-a832-987eeac9dbf9", "sighting--84bd3c38-8665-4a16-952e-3e7edf554e83", "sighting--73bed84e-f56f-4835-b5cf-c6b374712d5e", "sighting--b12964f9-2771-482e-90ec-f6c5680517f6", "sighting--d561115d-64fd-47d5-918e-7ac315d7e60e", "sighting--61e6ab80-2757-4036-b2c6-c5a0118ee4ba", "sighting--ce8405da-fa5c-4c2a-9875-731f04382dd9", "sighting--2c18e83e-6e9a-4cbd-8591-0b2d6b90eda5", "sighting--09f21ae7-5915-46d5-8d70-0b9df6a5b8e3", "sighting--6f807d04-d091-41ba-a20d-42514db8e94d", "sighting--dc963d8b-ff7e-45c7-91d3-caa5e0354cbb", "sighting--bdf30a92-9d8f-432b-acda-179663698ef6", "sighting--e34c8a86-2030-4939-9006-4e071cbe8581", "sighting--2e0139da-1e47-4768-971d-5b9813f102e1", "sighting--8c5463e5-0f4e-4d6d-a378-8fb27806068f", "sighting--e46e6aff-dab7-4153-a6f9-457c5b395cd3", "sighting--9abd6e99-d58f-4bff-81e0-a8dbbf9efb8e", "sighting--7215f06c-3c4f-4b52-b82b-43ca000144c1", "sighting--7fd32bd4-f707-400e-bc6b-cad0d3f56826", "sighting--e7332e8a-4ad0-4773-9d30-359a8415bc33", "sighting--0a84a47d-1463-4050-91f9-40bb8f486a6c", "sighting--bb1ec226-7a86-42b2-9c1e-d436523fd5d4", "sighting--740b08d6-738c-40e0-b451-560b59ee95d8", "sighting--a0900a25-49e4-43cd-b715-123f3dce632a", "sighting--c92b4aa5-39d7-4dd4-b944-b1403184f5bc", "sighting--b084730f-da0f-406f-9789-95214c952758", "sighting--9e7238f7-b83f-40a1-a850-fef9aaabdcd9", "sighting--b4a3c4e5-1599-4832-a602-6f44af6907dc", "sighting--a7dedec5-d337-4059-84af-ee1b4203d973", "sighting--ebd0dd4d-b748-498e-9646-017aae5e2998", "sighting--36f00937-fba0-45b1-89c0-46ddf48a5976", "sighting--1aea622a-a795-4187-ae3b-e09d6e0b4c4c", "sighting--0762ca6f-4b26-46c2-a8c8-97085efc42e0", "sighting--1e2f476f-3a36-4e65-8e7e-9216c6aafedd", "sighting--e56f1b3f-47ed-4b50-ab00-8661bd2b12f9", "sighting--c714de10-294a-4bfa-865c-940fca16d0d9", "sighting--a44f2212-7063-4a98-9bb7-73b51cb79073", "sighting--c1c48b4f-f2ff-4cca-be50-82ac0995204d", "sighting--2cf6cd0f-4051-4a89-8004-aa9394e39ed8", "sighting--6b2d4b05-06f5-4cfe-b865-6bb4d99914bf", "sighting--569717da-b983-47b8-8503-d89eb268e8bd", "sighting--461b2c3c-1c94-45ba-87fd-e26a647de42b", "sighting--c1935d70-a644-47a1-a87b-b50fa4c98b1c", "sighting--c85e0e80-dd55-44b2-8eeb-ff4f66f400f9", "sighting--b5e3d510-fc89-4c0e-9121-018184d20bba", "sighting--1dc4bf59-b07f-4d69-8466-f941d4556b86", "sighting--c3d650c3-3d19-46a0-b60f-a63412ccb94b", "sighting--2126de49-5124-481e-b4d7-e3853803fa96", "sighting--a3f8fbc4-1d7f-443c-b21e-933b9120c0ab", "sighting--21b8779a-60e8-4737-87b3-08d0786d305e", "sighting--64015738-685c-4b53-a610-5a0c092d3139", "sighting--8615d310-d850-4000-8fbe-5276edf28818", "sighting--427983d8-34fb-40af-ac33-a74c6549b717", "sighting--d00d5902-c653-4489-9089-3230deba3134", "sighting--b0fbb3b5-865f-4b74-9c74-a527448b3b53", "sighting--1d05d5bf-95a9-4b0d-826d-8e10366158d0", "sighting--f6760e53-080d-4978-800c-0b373902fe14", "sighting--333c2383-9630-46bf-8d99-92130ef889b5", "sighting--cbaebf6a-5d2d-4975-ac4e-179bfe1070e6", "sighting--113d0cd1-7ecd-438b-a7b6-880bd2ad6172", "sighting--e6462f02-0b14-46a1-b9aa-176ecfb52908", "sighting--365d8d77-1ea8-497d-a145-d8a9cb4a37fb", "sighting--f1918270-7b5f-45b5-a869-75906d9679ab", "sighting--471623ca-aeac-44c1-bc2b-345370da2c0d", "sighting--7d910c08-463c-49ba-b019-c2a548392f9f", "sighting--f65d9753-c76f-4b2f-8bd2-f653c1cd317b", "sighting--c7117b7e-4037-4f8a-8b02-661bbacada28", "sighting--1faee3cf-11bb-4d5d-b306-12623d4d0920", "sighting--859ad065-f464-482b-95ff-5ec2ad69b7ee", "sighting--23df07aa-e43c-44b0-8317-f0efa24221c9", "sighting--6b4e0eea-71e6-47c5-a644-bb6a690dbb35", "sighting--4885bb37-e7b3-418d-aa87-adc2e4505613", "sighting--b6e7847c-7f24-488a-afd2-6440dd48900e", "sighting--95105512-9d50-4a2c-bbe6-6f5c2a5c4ab0", "sighting--ca06c190-e785-4b8c-a2bc-e0ffb3407c4d", "sighting--1ae75717-2acc-4e66-9e1e-78ae6c1a6ed4", "sighting--812fc6c3-492b-4dcc-94a0-7ad879ff7bfa", "sighting--edf7fe96-246c-4c6a-b695-f6f452470c68", "sighting--f45acf13-d233-487a-b8a9-1d47739d15ff", "sighting--907dc72c-c71e-4f9a-aea8-60224148b179", "sighting--b62a8d4d-20a8-4644-88ff-3e33e519e533", "sighting--2d61a208-3c83-457e-b83b-1318d40f66bf", "sighting--c0d89153-7df4-4a9e-b2ae-2a812d2accf1", "sighting--7ec08e4e-8dca-4bb5-9aae-6c16501ec9d1", "sighting--886ab513-0b0a-410c-adfa-dcc4121bd204", "sighting--9eec98d3-0984-452b-8468-1fb703d51fda", "sighting--913adc14-ee45-4679-9abb-3085f2d49c25", "sighting--b9a79113-89cb-407c-97f0-95d59c026430", "sighting--1fc7c096-610c-451d-bab1-150c2e883971", "sighting--a841718f-50b3-44e6-8d1e-0571660aefbc", "sighting--8b727fd0-eaa7-406b-995a-fc90367c1f26", "sighting--1a70d111-bd39-49c3-b19f-9faa000e8712", "sighting--b425f165-bee2-441e-bcc3-24f556a9a86f", "sighting--49af546f-318b-407a-92b1-13d828814d90", "sighting--9b15aa6a-3c77-4d55-829f-8da489a2568f", "sighting--f20c7f05-06d9-4cf9-8521-6380b2abff25", "sighting--b0685ea1-f1b8-4ea3-ac06-f41d13eb9224", "sighting--ef6ec91e-122f-41ba-b98d-87357280d1b8", "sighting--6d665bd3-a376-4d36-897d-66df18d596ac", "sighting--29e7591a-4b86-4a00-a812-bbae7167eb88", "sighting--ab9ee193-13b9-4435-bafe-d3977fe9248f", "sighting--98165286-e849-4c3a-bbee-16b1f28faccf", "sighting--a9d725a5-a6ce-46be-bc5a-0821502ed10c", "sighting--ab83dfcd-5798-4ad8-affa-f9cb97fab7b3", "sighting--544bd6f5-bdc2-4914-b4b4-b6c85c656b8f", "sighting--48a31902-b422-4819-b7a4-1a729c8e90c1", "sighting--40df1269-6f57-46ee-8875-9291ccf43d19", "sighting--beb83155-b913-4b3d-b1d1-7f4622fe702e", "sighting--ada5cfe3-f253-4629-b8a2-3ab3e79b8ec7", "sighting--1a6fdf58-25a7-49a1-a679-dbfa7f1df632", "sighting--952308df-a520-4d7e-8200-0572fc3a7dbf", "sighting--243a87f9-98f0-4c12-8c51-a4b73bafd04e", "sighting--38a24d39-139a-43fe-9762-1dd37ace5d6a", "sighting--a822a32e-ec20-44c6-956a-43b2b4b0b870", "sighting--bd7d0af4-c68d-4867-a8fa-c792f7f2551c", "sighting--00e51eaf-f22f-4f3a-a011-c9d6a1488ca7", "sighting--3f32efbd-942a-4457-af12-04a2c0d52a91", "sighting--a5919763-1100-4d22-bee3-eca6e2f6d4d5", "sighting--23af4e85-ebfb-4073-8d3d-d6a87ea326c5", "sighting--6216e12e-8aaf-44a1-a202-305fb2b5ae01", "sighting--0f95212c-0e01-45f3-88b6-5e897574b35c", "sighting--ccf9be89-0477-4d29-87ef-214f316d3f9f", "sighting--204e681f-bb98-416d-8fda-ac7b48564e10", "sighting--d3dac765-1e44-4a8e-b662-69c40a8605f8", "sighting--9d012195-dd4f-40cf-903d-02c97fe1e73e", "sighting--49b9f1a0-3f5d-4a3a-b641-2a351f97c9d1", "sighting--689a660f-51e0-4344-a410-9b386abe957b", "sighting--dd323910-90fa-4d27-89ae-8ff4e96e8fa6", "sighting--34cfccf7-bab0-4049-9bb6-329b6e8102ec", "sighting--39584c91-43ba-4996-b4e9-608864c5628a", "sighting--3a234045-7e48-459d-b121-e43ac35287e2", "sighting--ee758f59-68dd-46d4-951a-71dcd32f193d", "sighting--7fc292c2-1c5e-4326-88f2-888addbec34b", "sighting--78bb2b2f-4ca6-4d96-a137-83eb0d2ed941", "sighting--e96809ee-7551-497a-870e-3d2d25746821", "sighting--f7b6aa96-655c-4cd2-8422-7829361870a6", "sighting--b72c225e-1954-48ce-88e8-5b51f267ac88", "sighting--3964e3c4-2e09-4e09-9ae8-dcd0ff900fd7", "sighting--e850bf84-1d1c-4c5d-b67a-c4eae0c41b9d", "sighting--2816fddb-bf56-4524-8964-b878f1950411", "sighting--688bb9c8-6f3f-4692-a670-3639aded3b58", "sighting--f77d986b-8572-4bb0-884d-8680a83661bd", "sighting--0632d277-d2f5-4ea6-9c80-d615fe802641", "sighting--c97ca095-a637-4fa3-b2fa-e0f6ae0b815a", "sighting--e5379f73-57cd-4e7d-840f-6e54c034f670", "sighting--0dfef3a7-6911-4596-aa46-ce9f022a1409", "sighting--d466d9a4-7452-479e-94af-6936402f567f", "sighting--6ea89587-9691-41d2-ac53-ad3636bd3a99", "sighting--a5b9370f-6681-4723-8d23-e65867fed762", "sighting--54debcc0-cfe6-46e7-91ab-6936e1ecc065", "sighting--6df9d562-98b6-4b30-90f7-c66038ccbc9a", "sighting--dd9e4a51-b774-4adc-bd1b-a38ef8cec3e8", "sighting--d6475d1d-a58d-427c-86b2-e0331a96e5c9", "sighting--33c66844-7dba-4269-a6cd-9ce94142d576", "sighting--cdc46f9f-fc17-4239-a6f0-26dda8d4292f", "sighting--3262ecef-4141-401d-80e0-f87911b4c599", "sighting--f04888b5-3a71-4dda-884d-094c572f5720", "sighting--bd8fee0c-cbe2-4dcb-bc82-6d3f068b1fbb", "sighting--ff4803ec-e306-4297-9acc-ccf0def71751", "sighting--9fd2fde0-3a6c-4eb7-bd72-a92066bc55dd", "sighting--56e8cea9-b48c-4324-aa59-e99393bf6932", "sighting--df42858e-c4f6-4a97-bc62-53949938644b", "sighting--aff1eeb5-1734-4cb9-a855-8e85f1836ab8", "sighting--bfa0152a-f8f4-4f75-b9c2-b52d9b8eba34", "sighting--5fd358bc-0e59-4414-9710-baee1a03dd9d", "sighting--98979f52-83aa-46a6-81b0-cd1cfa437798", "sighting--2964d5dd-8ec2-41ad-b1ba-70ff4262127a", "sighting--c92e6ecb-1925-4187-912e-6272309720be", "sighting--d820782d-4c86-4933-961c-76a88a7bb9b8", "sighting--c0cb03cd-8f7b-4b23-8846-b6e625c64d3f", "sighting--e60bb8a4-fb55-466b-9a06-fa5fabf0315e", "sighting--14bbed89-3011-45fe-8785-4fece15d84de", "sighting--a1b8935c-5fec-410a-af05-1e514813d380", "sighting--804b994c-ff99-4e88-a2e8-9ba5b990a2d8", "sighting--71022a6e-3809-439c-9872-3bcfdac0ae0e", "sighting--5a44016e-3254-4af3-8355-e5df293cc811", "sighting--d5bdd859-35de-48c3-a3ab-17b9398026bc", "sighting--671847bb-e111-4a60-9970-e6a7f058da3d", "sighting--4d56d789-18c5-42c1-a7e9-e9349692aa49", "sighting--10351960-faab-485c-960b-55d5f6b1c51d", "sighting--f30cc7ac-f9e5-464c-aad1-e4ec7be7f295", "sighting--33b9b03a-6eb7-40c9-8818-55d42c1e4372", "sighting--51f0e13a-b074-43a7-bc25-4f372a297c11", "sighting--8bf207f5-4fb5-4ee1-ac91-89f31a90144e", "sighting--c7a69d91-d402-454d-9f52-43769357b905", "sighting--56ef2ccf-4b5d-44ce-915f-ae0dd9c532e4", "sighting--c1267bd1-8aca-4820-adf0-432abd06df8b", "sighting--8f5effbf-b26d-4b0d-9221-51134dd3a351", "sighting--daec11c0-774d-482d-8fe8-aaea0d7a8ad0", "sighting--16a559f8-25b3-43ea-a220-ad1b4ffb5852", "sighting--ef61fc63-915d-4042-a4f9-ef1ca39f87ca", "sighting--707c54c3-9075-4b0b-8abd-fe46a7ac1f2b", "sighting--b86230fd-7a02-47c0-863b-4405e22fe452", "sighting--48f3452c-0150-4fc8-9ebb-aeb32e82194e", "sighting--6189d533-72bb-463d-a96e-f6d2ea2ccd62", "sighting--509ce7b2-98f1-4e55-a17a-6e2fac76e196", "sighting--2189f30a-f74a-4ec7-b7c3-6aaa83ccc855", "sighting--23a42949-3d12-4667-805f-0319ab351088", "sighting--fe871180-4c9c-4dc1-bbc5-51fe0e162116", "sighting--6716cfd8-aeb2-4cfd-8cd8-23593e8e8237", "sighting--ebce8d41-bf49-4e09-94e6-d9d99d11799c", "sighting--81b3fbed-5b19-4fe0-a89e-99798f2cde2f", "sighting--46ecc36b-a08f-4ec3-b105-754436e16c05", "sighting--3ef4618e-5f70-4459-99dc-c69bcc6ecd5d", "sighting--a9ac61f6-980c-4bd3-81f1-c2ec9401bc79", "sighting--8a12113e-d0bc-487a-92a8-4c4ff7745c03", "sighting--018c70a2-8a12-4447-ac8c-7228baf54085", "sighting--98d72a69-6294-4d25-ba09-632cb60c033c", "sighting--87326b32-4299-4686-b042-fe5ea2f32438", "sighting--0cc50f9e-0b68-402e-bd20-9515f0ccd37e", "sighting--36f4f0c7-1266-400a-86ea-c5596bd8b840", "sighting--557d2a4d-b37f-4e8f-a590-46518fe5ef69", "sighting--aec2a432-ce1d-4296-819c-4ff0ed865b7e", "sighting--853b5a33-9c45-424e-b8b4-173f57ccb535", "sighting--10475fcf-26fc-44ed-b28d-693ba446e45b", "sighting--dd2dfd09-f9c8-4895-b5b7-d31793c773ba", "sighting--d541984f-a375-4848-a279-662cc6fd4dcc", "sighting--af4b287b-4411-4c23-ba6e-98dd57aa1ec5", "sighting--9e4f0e9e-6009-4cbe-899b-37f6e3b05dc4", "sighting--6f629a91-116a-46fe-a666-92b625da3fd7", "sighting--c330b56d-5c8a-467c-b3ce-99101ca40c2b", "sighting--2b000f90-e463-48ac-b562-ca3044e8fe9c", "sighting--f3738538-4287-40e2-8af3-80baed58c777", "sighting--72df45f5-28b0-4570-9229-48ced1d59530", "sighting--076c8da1-2121-4c49-a98b-1848350af068", "sighting--adb265c2-6451-4df1-9ec3-619701b0a296", "sighting--909e04d9-5d41-4751-97b8-4edf4a5c0d12", "sighting--0f1f0e86-6c90-4f05-ad55-d91d4b9a093d", "sighting--fd4c8a14-2920-426e-b3c8-2652ceff0c91", "sighting--bae34f93-baaf-4d32-b948-4e75213d1ae4", "sighting--fb07ef6e-44c8-4e73-b9b1-3bcd068b57f7", "sighting--9e1ac42c-b064-4dba-873c-4ac4d8522034", "sighting--1dc26f14-4917-410e-9b99-2184a9a6c39e", "sighting--a058f816-6f67-4df6-90bf-679ebe7bcd20", "sighting--85d32f39-0f58-46a3-bf90-aee3c5432875", "sighting--d03f35f7-9159-4e75-b2f0-6ec95562c1a8", "sighting--db4d253e-f08d-45f1-9b0e-f7f6aa626ce3", "sighting--886f7ab3-e924-46c1-9654-09b9a2cdb9a3", "sighting--32a168de-7664-4fee-ab0f-b1a6ebe404bd", "sighting--8ddae384-c394-4c3c-a063-a5e65fee6f32", "sighting--08ac49d0-837e-4520-aaed-b99170627f78", "sighting--efaf9150-a0cf-422a-a78d-0abfbf1490f6", "sighting--561d70e4-cf10-4782-b2c5-e4547985605e", "sighting--d0ef8d9b-a8ac-4df4-b92b-c02b7433a561", "sighting--163de67e-7ebb-4b48-b8fd-7d39f2a091dc", "sighting--e8576d75-b753-414e-875b-496609d6cb0d", "sighting--e74c5134-0785-42ed-9535-ed25ffc2c1d8", "sighting--6072d467-74d1-499e-8cc8-1c47af178e16", "sighting--4d17786c-20e7-4bb4-9b1a-aace5f2cdcad", "sighting--51da04e8-72d9-4c62-9606-b86d2b96fbb1", "sighting--e2e71f65-1b30-4f20-ab7f-b02bf7111c29", "sighting--9143664b-123f-442f-a76e-c3992bb3b3e2", "sighting--e38c9aca-d121-4f7b-9ef2-fe5b2d000bb1", "sighting--7c00bd53-80ef-4ca8-829a-6d68de9f8e80", "sighting--4e5594ca-4d45-4a8f-ac8a-08ebe52aed02", "sighting--2ff03086-3d2f-4a15-9a07-d1223ad88673", "sighting--b5a70ce4-a4e5-4b7f-b152-9e77419c7814", "sighting--afb353d0-731e-4faa-ab83-7ec5962640cd", "sighting--344d615e-2a56-44c8-b2ac-05a95c9f466b", "sighting--de7de106-d910-4f07-8177-81983bb407ff", "sighting--67a690d1-78de-4e1b-b09b-318111117213", "sighting--c017be33-2202-4dc0-a9e8-30a3ee178395", "sighting--56cc21a8-786c-493b-8f10-1a565d617e95", "sighting--57dfbb33-09e9-4b25-a9aa-7f298bb68025", "sighting--8712cd82-37d5-4b72-80dc-4909a3918949", "sighting--dca3d822-073f-4432-b5ec-95c98cecd754", "sighting--ca44a27f-34ed-478e-8dfa-26467f3ac366", "sighting--8d1d6502-969a-4d03-9743-f69bfca03791", "sighting--a5670dd9-a85f-4510-bdd0-e6e84bde90cc", "sighting--c77ff3fa-c81a-41b1-ba8f-03a0c9b66ab3", "sighting--387c4a42-4130-413c-8a23-849fcac665dc", "sighting--6296dcf1-c23b-4325-9163-80038c2077a1", "sighting--528b2dff-3782-4eab-a7e6-e84cdb9097e8", "sighting--724420b5-7d08-4126-b339-ebc08a398ce0", "sighting--53f7c775-35ad-49c3-945a-4d50425e6921", "sighting--44c79b03-5429-4dff-be29-1d46e6534611", "sighting--107602f9-0458-48ae-bca2-442e93f938f7", "sighting--d026ec77-1de2-4089-9a27-5909d1f1b16d", "sighting--4eef090e-7aac-4277-a61a-ec0164a0e487", "sighting--6421456f-4438-4fa0-8f90-6dcd31c660e6", "sighting--630c2898-cacf-413b-b9ed-d56e2604b1b5", "sighting--a9ca5442-39e6-49d1-87a0-a105c2490a71", "sighting--0bc066f5-5ecd-49d0-9dfa-00b94887a758", "sighting--6ce08906-a3e2-48e4-b9c1-d0e455bbf115", "sighting--902c3c75-73a5-4a96-b75b-46d927ba027f", "sighting--1955a6d0-186f-434d-8044-8f649f8a8528", "sighting--4df68c61-9cb4-424d-8e0f-c82c9ab074f1", "sighting--d42aa34e-4b83-4c25-a33a-212cb4b9190c", "sighting--30769e23-681c-4b2d-b611-496981a941d5", "sighting--cc35fda6-bb84-415e-a82e-7523f742ead9", "sighting--76068145-52a0-4dea-9bf1-4bc588edbb52", "sighting--d24c2025-db65-4d42-a3d1-4b81f79f7274", "sighting--f2951bd0-ca0a-4091-a7c0-f54cd93f0207", "sighting--50a8682f-3eb7-4dbe-86f4-2c81e7dfcbfe", "sighting--a0d3011f-ffb7-4176-8628-e0fcf41014d6", "sighting--a9ac4faf-bcc4-4ffb-a34e-aee2b899b626", "sighting--1b560374-5c33-4258-be31-02590ec94d1f", "sighting--a195c5a2-c3d4-40fe-90b9-f4873d2e8686", "sighting--64ba5d1b-3de0-4d31-885a-aa30e89fc450", "sighting--c0d0abf2-acbe-4efe-8850-0c154c3b657c", "sighting--38b251af-dddf-444b-86bf-2bb8b27e699e", "sighting--865bb3e0-a9dc-4288-95d2-a795d5ddacf2", "sighting--f5637a73-4d05-4f3b-be5b-845711809e86", "sighting--a96dfd73-ec3e-46fa-be53-9d764b5747a8", "sighting--05a0ad10-3cc4-4e6f-bd50-d65d9eea0339", "sighting--b905b9f4-dab3-43bf-abc1-cbaae205dd9b", "sighting--cc0e9cb1-f684-472c-a345-0cf99fa90143", "sighting--766df638-b363-4d9f-88b1-35cb8f8bb010", "sighting--e6c4bdd3-8d04-4c8d-8570-3b51305489cd", "sighting--0ad9fbc2-cde8-4a18-adaf-69a358bef982", "sighting--9bf28e1d-4a8b-4456-8c76-6a00a4fa57c6", "sighting--3f5b9838-d5bf-4e6b-bed8-14a0184a4e40", "sighting--bfcf3c0b-09a2-40af-ae94-9423c9d9788b", "sighting--8e8a7e55-891a-4599-b337-a93a21f0a64b", "sighting--539fdada-5d2f-4cb4-a520-7aed08ddb7bc", "sighting--43e07e65-ae56-4aab-a49b-82b03db79e42", "sighting--afade02b-882d-4262-a0f0-66fa01618a9a", "sighting--14980b89-cefc-4639-8bba-6f4f88ad940f", "sighting--93de9d28-7344-41c8-9a3e-3b55c9ec0c19", "sighting--010ba97c-698f-436b-b71d-2009ee2c5ca9", "sighting--cdb1b697-cbb2-470a-acb6-26804a3c50b8", "sighting--61165024-3aff-4bfc-933e-0e60b59201d4", "sighting--b688cabc-d07f-4ea0-b789-71df03e699cf", "sighting--00cceadd-c1be-4fd0-badf-d9ebf7f8f2a8", "sighting--3085b7a9-a89e-42e1-9fd7-59b60445904a", "sighting--f8f2f79d-ddb0-4b0c-b296-2c31f7a40ef6", "sighting--c188e904-a5b5-465a-a87a-e3e1dce353fb", "sighting--76de52cd-8c6d-40f5-b151-388b6da4340d", "sighting--6c873b6c-8e67-4b39-b265-5a515ff0cc0a", "sighting--1a896dea-3ac9-4e0d-9b14-758f4ca8268d", "sighting--a85f394c-a6bc-46e6-aff1-cdc4453c0d46", "sighting--211021cb-11f0-4ded-8044-f4db4f365f03", "sighting--25fe9e19-b014-4c45-9084-de58af0464e8", "sighting--30ecb2c6-5898-430b-9171-67f53da1a51f", "sighting--53dec584-4bf3-4e0b-804a-9789d58818c7", "sighting--1608948e-7778-4df8-b51d-ba34214950bd", "sighting--de3028e7-2a1d-4926-bcd5-c1f00d213b52", "sighting--f0021771-bb87-4f89-9476-046e9c2887bc", "sighting--4a82b0e9-b89e-4046-a42c-28d2c5caf6ee", "sighting--dca03dc6-5440-481a-bdfa-cb14b433211f", "sighting--485bcc20-919e-4b84-a59e-1ab23105cbe1", "sighting--c0878cc8-3716-46a7-9209-ea5ca9d2ae9c", "sighting--6c2eb520-a213-4894-93c1-dbf8b322380d", "sighting--646e78c0-ce86-4659-bdfd-fc73f359e8da", "sighting--1a298e2e-bdee-48c0-a5de-f6373a251f93", "sighting--5b88c908-f720-4fb2-8131-24a729320382", "sighting--21d3912e-82a5-42ef-bf2d-b0a207a0c125", "sighting--65a5a4dd-0136-4ade-ad9d-36e974b5eeb2", "sighting--897e22b0-d308-49ba-a599-f63c83df9b1f", "sighting--0849635c-788e-4b80-b0f1-33b65aef3828", "sighting--b7017b8f-d846-4f29-b987-b8e80a857b47", "sighting--bd30fb22-0962-4148-ab28-d83a7db1e276", "sighting--d59147c9-a44d-4f66-aad0-01759269abe0", "sighting--828b1acd-0bc6-4d1d-9489-99582c1038c6", "sighting--d2de9efd-ed40-4171-ae64-284ce95e5415", "sighting--7a281cb5-c028-49c6-a9c4-cc457d7b6387", "sighting--e6287b8b-624e-4885-872e-d3d59c4fb621", "sighting--29699a80-2a90-4a4c-867d-265032e069f0", "sighting--295be93b-b1c7-4cf3-b5b8-470713b08dc7", "sighting--205b6f87-6b08-4d94-8f40-5d54f28c5a6c", "sighting--8f5e5d1b-5feb-4a96-9882-7a4b9c2d6e54", "sighting--d09b5424-169a-4714-9634-6fb15724be56", "sighting--0e2ab00d-06d6-4b90-908f-449cd17fd804", "sighting--91a7d089-be93-4df2-a889-f90af075c9fc", "sighting--b4fb67be-0a4f-49a7-a4a0-3fabfc182c80", "sighting--a3e0a9a0-68ff-41f4-b099-862fcbfcb21d", "sighting--46777f43-5405-4255-a559-e09c9b434abe", "sighting--2b4ed465-be0f-4dc5-8db0-b1f2c116b163", "sighting--ce553482-6395-4c9a-8bc6-5c84da35357f", "sighting--36cc1248-04e5-4084-b923-3f1505e00ca5", "sighting--a8b56e2c-8c8b-4135-b6bf-cbed709c03c8", "sighting--36cefd2f-283d-40ac-bec7-43efaad59bb3", "sighting--950d2993-4e3a-45c8-9233-0bef8985b185", "sighting--99e7e1c8-26b8-4f8c-bc61-58de083ec087", "sighting--0d3bbc90-cc9e-42ee-b5ac-97a5c89d8660", "sighting--d45fd96e-712d-443d-8b9d-370fb18a2f21", "sighting--5cb5451f-d31d-4891-b405-c9cbb40204fe", "sighting--92000b3b-8fca-4b1c-8d2e-95d89a0831f9", "sighting--b2b3e50d-907d-4821-9075-723f7f26d9d2", "sighting--a8f7896d-decb-42eb-a98c-be036ddfe100", "sighting--093aee82-d88d-4615-8ac8-2b6d7da597da", "sighting--2d560596-72e3-4dce-81c0-24ba6532fe8a", "sighting--f664c41d-0fa6-4a6d-8d65-23d2a51a4877", "sighting--097f6efb-f2e3-418a-a617-9528ab640ee4", "sighting--0d988397-b403-4e93-9e49-10af93a9ae61", "sighting--9b5be9b0-b870-432e-bef5-7ce9072fdd9c", "sighting--9ce545a9-84ca-4004-879e-b99a4d30ed7c", "sighting--2d2c4632-8bf1-4027-a97f-4acd1f325215", "sighting--18ca33ce-9cba-4d4d-b949-6d07fe5900ff", "sighting--469a95fe-e34b-487c-94b2-f423bbb946ca", "sighting--da1452ce-0889-4afd-a6a0-05ee9ed97a8a", "sighting--aee1048d-c296-446a-80cc-bee513d17ac8", "sighting--57f75ae7-5663-4f5c-a2d1-4593fc871f95", "sighting--fb74749a-b795-492a-997e-36c073e17a49", "sighting--1f7b2932-ca10-4235-aff8-207791024832", "sighting--bdb75fb2-a015-4beb-8672-a8f61a5b1f87", "sighting--b871785d-074a-4cf4-a328-b1cfa41d11c9", "sighting--0b73e55f-9dea-45ef-9115-543a7c2fa227", "sighting--5f2e66f1-a1d5-42f1-8a49-f9351892658a", "sighting--f1b23413-35b4-4669-b5c5-110ddc8a749e", "sighting--4d66d827-3c93-4943-aca1-c7a550698fdc", "sighting--12655f76-d185-4e09-aeb8-ecb3c681bc68", "sighting--799dad5f-9c93-43f0-8d7e-1e6eb1608f22", "sighting--7711d3e1-e279-455f-9d6c-868ac75e3dc0", "sighting--01c63a24-5e2d-407e-a425-0b6a451acf1b", "sighting--a71cc314-5724-45af-9fe8-42c98f56153c", "sighting--7e050e5f-709c-427c-b5a0-4259517fa2c9", "sighting--587659ed-7788-4cbc-8f32-67dd9e0ade86", "sighting--2af3beed-3480-4c88-855b-e25a8a225220", "sighting--fa6dfc8a-5c34-49ee-ac62-064bd29a2f78", "sighting--37824ceb-b22f-4451-a8c5-80cbcfe80e09", "sighting--0b5a1fdd-c829-40cd-ae83-a20e7b76c06f", "sighting--cb54af08-e48e-42f2-8cf5-4db7123bb991", "sighting--488b07f5-6c50-400d-9a9a-02825c6778ae", "sighting--526fe214-445a-4f98-8523-18d27f8c950d", "sighting--dfee9cf7-bdd8-43d6-833a-6726fde7ef3d", "sighting--bfe1a5e6-6570-4e41-9938-253d0403c839", "sighting--e28f03d2-4c07-495a-9802-3efe7b1633f5", "sighting--d369bb50-2b03-441d-b092-ecbd9c922a1c", "sighting--f87a68c0-0c45-48a2-b8bf-fc5fe7dd35ba", "sighting--5f1451ac-392e-4532-9249-67d8dec725ad", "sighting--9025af87-c5b2-43c5-be2e-90ee5397e7fd", "sighting--014ff74c-1f20-4f8f-a865-6be951c39ecd", "sighting--5b3a4582-2fb5-4313-85b6-99a6714bdf91", "sighting--cfec00ce-dd8a-4d80-903f-9143830eff48", "sighting--9eb67789-1b9b-46c2-aa3d-96e9e77e1a62", "sighting--4b4ad396-1ec8-4c0e-916b-23695b770681", "sighting--837ce43b-024d-48ee-8d6c-65ad86f4ef0e", "sighting--ff7c6b54-72f3-47c6-8816-bc8cc8b9e74c", "sighting--c9035bde-1b73-41f4-95e0-ff72010209f2", "sighting--8d7fd99b-7315-4dc7-899d-3e7ab0048f99", "sighting--229fd4a8-c2e0-4f02-8330-e3b5609121b3", "sighting--59673898-9093-452a-9567-cd7e3b93e04b", "sighting--db320c69-fb52-4613-991b-c3235911940b", "sighting--ebec04a2-e013-49d4-8ada-c246d897c183", "sighting--cf174dee-d499-441c-834b-bb326b196e8f", "sighting--e8d74e2f-f35c-4525-9b34-f7fcb40d473e", "sighting--91a622c1-c4e0-455a-bcc5-ca0acf72d41d", "sighting--aabf1815-b679-4743-989c-1ca122f2421a", "sighting--00b2775b-a78e-4085-bf4d-7d472f94da1c", "sighting--1799beb2-5bf7-4c10-aafc-7fe03f9ef72c", "sighting--46868edf-ca76-4e9f-9542-a9d4cd4baf8b", "sighting--fc3aa98d-87b8-43bf-96db-150b6ef0fd45", "sighting--8ed4e513-97a7-4da8-b8f7-0a22ec43e493", "sighting--ec863daf-8a52-48fb-93e0-657551dfda13", "sighting--5adaa6da-fb08-4862-ac5e-85503b7a4ce5", "sighting--f376ecb6-ee75-4a2f-8b06-d0b7359b184b", "sighting--11752157-ad5f-4c7a-a3d6-9c386a9a5b93", "sighting--974353bd-fcaa-4f3f-acc0-637834b21745", "sighting--fdf8ae1b-ef1d-4045-8e03-5cdab46fe1fd", "sighting--9bd229d1-987d-47ca-a791-8c259222c3eb", "sighting--bd5cbf17-54f3-4c9a-a03e-d91149260947", "sighting--4adb2b3d-a729-4a1f-9ade-4181dffd95d3", "sighting--67eb093e-7a27-470e-9a24-2ecd7a8029dc", "sighting--eb1abfe2-12bb-4494-b498-63385d33e0dd", "sighting--567629af-da1b-406a-9b66-7a390917ecff", "sighting--7fbc8bef-1d07-4e5b-a4d3-9930c8f9b878", "sighting--41c94000-2eac-4937-bd5d-29e12d79628b", "sighting--a748a471-44c7-414b-a98f-a95fb1da63b6", "sighting--69406d5c-9fa8-495b-b9cd-b803aedfacbf", "sighting--629c1c4b-1751-4b47-954d-19c474347a2d", "sighting--710f587f-7f72-4186-8710-3f32a4ffbe98", "sighting--cc4fbbbb-9dce-4525-a221-1dd40794741a", "sighting--e655c260-2b98-4039-a3f2-83912a28cb44", "sighting--1ad2f804-637d-4c16-8ffa-3d4355961dac", "sighting--2ff7666d-36e6-40aa-8af6-6c33fd154d4f", "sighting--f376c7f2-aa44-4fe9-9ff2-f4f940791683", "sighting--20684545-0ae4-4c86-a393-217eba21d40c", "sighting--431a46fe-a23e-4cd1-bbb9-b1b268777645", "sighting--3df0bf98-f606-4f89-b4b4-bbf7b6846125", "sighting--68fb26ac-6d08-43f1-96df-cefca1f3bf7c", "sighting--9e62a960-0fa0-4ce7-9cbb-fc06d51fe27a", "sighting--ece4bef8-dfb8-4acf-ad80-f840fcb65b4f", "sighting--2f033946-4872-44fe-a81a-2622b871ce89", "sighting--b44d4b02-a733-4bc0-9d88-a43bbb012149", "sighting--a5cf7fe0-39a0-4bac-a428-e029d06eb9f4", "sighting--2f56ea0c-1498-4fe6-b470-dc4739a8ed5f", "sighting--f8d1812c-d1ac-416d-9a92-0ca7026ce483", "sighting--a8c46909-e5b2-42d7-b362-042203a04785", "sighting--335348be-988b-4e8b-a6f0-256c258b0139", "sighting--3062e012-d181-4649-a372-490998f8f47d", "sighting--b07a75b6-edfd-4850-b478-fd28c46b616d", "sighting--2acebab2-190e-4c31-be49-a6c906cbe235", "sighting--4b220d14-4dae-417e-a4ba-868e8fcf8961", "sighting--b8698901-8297-4ba0-9660-48df8be477ea", "sighting--fa9c5680-30d8-406b-b1a6-914ca768180b", "sighting--03822fd0-edb6-42be-a68e-674891433caa", "sighting--8b9d05d5-635d-4ae7-a508-4c29661077e2", "sighting--4894282e-835b-4744-a1c7-15e8fa45eaa0", "sighting--a2c744d1-bf92-4a63-a665-36d2ec1f26bb", "sighting--fb9c143d-8421-43a6-b774-c804745dfe82", "sighting--425a62a6-0ca5-4336-800b-37cb64cd3c7a", "sighting--6d03835f-eed6-4a0b-bdff-e010d500856d", "sighting--05458188-7a50-4a37-9733-baac1eaa9930", "sighting--d9462b5f-b7c6-47d6-a8d4-f9be9ebdc5c5", "sighting--28db5a70-3390-4dfc-a289-06f7ed5edee5", "sighting--c5928027-19eb-4d47-9f04-c242ac62119d", "sighting--8288a5c9-9387-498f-a3ae-6cb3eb867faf", "sighting--10dcaa5c-2abc-4c33-bf24-fea12014b49f", "sighting--dcf6cfcf-78dd-44b8-b728-92c0f7274410", "sighting--d3fe6a53-6c14-4f08-b584-afaf24f1e4fb", "sighting--2dd44415-4d03-4c06-bb65-849ec9d40567", "sighting--d945a39e-8a71-4ad7-86cb-db1e4d756cf3", "sighting--ad1ca132-cf1c-4c08-9913-5081486f6443", "sighting--f46eebf6-df3d-46eb-85c0-91087e72ab39", "sighting--1ac576ac-0ddf-474e-ac4e-6ee0740d9993", "sighting--2fc2facb-c8ed-4767-b842-b6880e30f5fb", "sighting--db8e8367-588d-49a4-a4af-cf93b54f9585", "sighting--d49a947d-b12f-4f2d-b879-ed1f1cbe5172", "sighting--28ef1c0b-c58f-48ff-a8a5-6696bc8ad467", "sighting--c7e0c7f8-bd92-41e0-bc7b-76dbd6531e6c", "sighting--37f6f58d-4d5b-466b-b38e-2ad590cc0fb2", "sighting--fbc05e95-4ffa-41b7-82d4-649b5933e145", "sighting--b0bf1030-98b7-43f9-8ba9-d4c993f2d164", "sighting--ec56ee0e-5836-45e4-bfb3-1be116ae56ef", "sighting--c92707c0-6735-4cd3-8c72-e5d485e9027b", "sighting--d8906e34-6cc0-4d1e-85f4-95cffa32880a", "sighting--d0e6e4b5-1e4b-4426-8ba0-fc67d4036a19", "sighting--6a21bbc0-837c-4b00-9606-c721ddc3415c", "sighting--57ab108b-01fb-48ae-a1e4-6654a644d50c", "sighting--3e101e69-d93c-4b81-9e32-771b6da649c7", "sighting--76813dd6-d991-4af0-8561-1ef18590875a", "sighting--d71574f0-3b5a-4f3c-9f07-972cdeb37040", "sighting--09adcb10-8173-4587-9354-8a5f472079a7", "sighting--7bd2c00d-60d6-48b5-a1c2-68242c169e16", "sighting--f81eb2e3-b605-46f7-92c0-1e397beba6fd", "sighting--a10b8aa0-2294-4c30-bcb4-b2e393b3b927", "sighting--c5b0affc-ab66-4399-a585-488b1ef85528", "sighting--9af269d8-7def-4aab-8373-2836c08ba0b6", "sighting--7b55389b-6773-4515-aae7-68603fadd026", "sighting--5ae9a6bf-598c-4754-8f01-0d675045546f", "sighting--26857172-8f18-49f8-baf0-954feda2a5ac", "sighting--14ca9471-c265-42b6-af03-74cfbfafada2", "sighting--2dbd62a8-f528-4860-af1e-f06aa8c8ff47", "sighting--bc94f8bd-1ac0-41c5-a5a4-839083dbc7ef", "sighting--60b837fa-7cf1-4498-bc38-95b7d1462aa9", "sighting--81b53ded-71f8-43ee-83b8-1e4e1488d957", "sighting--526f1ee9-b30b-45b3-a4a7-0a39a31da536", "sighting--7ae988bd-6a20-4d70-a5e0-a26fb09705e4", "sighting--48da1a48-8ad1-41f8-b0b3-6ba6b9a86329", "sighting--c723fbdb-2bc7-4651-b32f-072106076093", "sighting--7cc14721-ef26-47e8-ab6b-175348f0882a", "sighting--a6c8d4c9-e8d1-47d8-87ce-0955cc8c335c", "sighting--08036315-4422-44c5-bf00-56e50c4e02f9", "sighting--3193cf3b-389f-4db0-a314-9196c8f9d13a", "sighting--651afcdc-cc1e-4bb1-984c-c3fab1dbeeec", "sighting--9f6cf803-1aef-4912-b1b2-5635c0addebe", "sighting--bb6f5410-9f51-42b4-bcee-4b0be4c6a8d4", "sighting--0036d94d-958e-4e4a-a346-20776a27c49b", "sighting--f5715566-d7d9-48ee-b79f-56b902beefc5", "sighting--cddfbc54-69c3-400f-b99d-57e63891064e", "sighting--9cdaf4ed-60f3-4c8a-885e-788bd2c36429", "sighting--08ce7bbb-fd21-4996-b6c8-854a41652f32", "sighting--bf7d949c-16bb-46a7-a59c-064493cc722c", "sighting--589f91a5-55ce-4091-a378-655d37d34b09", "sighting--7d5edc60-6929-4b35-bbc9-7d28d62b1032", "sighting--1a05410f-ab5a-43ea-8630-5a0de1079003", "sighting--34bbbcbc-5ce2-4bab-aaa5-7974576b4a4c", "sighting--88bd1511-7903-4587-b033-b674a002e592", "sighting--b0538ae1-606b-4f66-b5c9-d7e127552acd", "sighting--7fad705b-01fb-4d6e-8a0e-f5ea5b82a5c8", "sighting--db0c8db4-d780-4626-bdde-d831d0fb3812", "sighting--49702c78-4c85-45c2-8c4c-b4452c09fe7e", "sighting--51e5106a-e7fa-4242-9dd1-e4d9a040c09a", "sighting--676ba8e5-9a18-45a8-9b31-0dfe2026e91f", "sighting--be36c46d-f0de-4450-b14d-500549fde0eb", "sighting--8d56d2b2-8caf-4342-a5a4-6c2c9a68e99d", "sighting--67366ed8-f9ed-42d7-b643-86ff0b404652", "sighting--561a6ec4-3094-45d6-9f07-6d15d2059312", "sighting--c02e28b0-f536-4270-9bf9-a5ec54798aca", "sighting--ad667419-5908-4ff8-842b-65b7fc435331", "sighting--5d5e9a58-195d-40f9-9c87-b056a7db9e85", "sighting--186c71f7-fd9a-4a16-98fb-30daa16bc5df", "sighting--aa4f3e6b-3d36-475c-95de-ebf182647327", "sighting--bd9deac2-5b53-4d71-9464-c021960848e5", "sighting--83f62f4e-a1a2-40ec-a3d4-4bee16090c75", "sighting--567e307d-77b1-4d38-92be-2d9dff890765", "sighting--aab3cfe1-6380-4ccc-ad01-da5e12310eb6", "sighting--c029e0d0-e5df-4350-b2a6-dac914cb4160", "sighting--29793bc1-0fb7-4a86-b034-b352d2bf9e1a", "sighting--8bcfb0d2-b14d-4826-acc2-56d38d2afb80", "sighting--5b3f218e-2a32-4610-a98e-6f8f1e1f59ef", "sighting--9d4fa3d7-9fc0-46ce-b8cd-88481392f09a", "sighting--29cc792c-6fff-49b0-99f9-b2831c10f83a", "sighting--330369f4-3701-45f3-ab3b-be880cbd0fa0", "sighting--c325bd7e-3518-4272-8ca1-f5b1e38f174e", "sighting--fb05dedd-32a2-4228-b46e-1c5e1c51cd54", "sighting--1984e4a9-bebe-469c-b34c-23cb1f5efdd5", "sighting--0176eeba-d2e9-40d5-ac0a-27e591ee86e9", "sighting--402e6657-45e8-4ee4-80d3-362b12a0bd98", "sighting--5e522f9e-6d2e-4841-9b5a-3ca469d6b793", "sighting--28ef2589-89be-414c-b975-26bcf6a56b6e", "sighting--990d762b-086b-4f3a-90ff-3c9f96e382e6", "sighting--99fedf1c-7421-453d-aa6f-30ec3180f1f0", "sighting--fc606b67-d6e7-43c7-b0d2-41b3b9e3bc66", "sighting--283fd54b-aa1f-43bc-9fb6-ee27d25a651a", "sighting--fdde6d16-80fe-4cda-863d-60c112a59642", "sighting--d69a33bf-7dfc-49f3-9ddb-fecd249de0a8", "sighting--063bf963-372b-414c-a7a8-20cdbd855c7b", "sighting--9a80021e-9066-45f7-a65f-7273e773d6fc", "sighting--38ef1cd8-7480-493c-9830-d641b7d8d167", "sighting--c46a25d1-d871-40e5-9968-99b5f047f8ed", "sighting--de02340c-a41c-442f-bab3-e5162b8486be", "sighting--4b28ab58-915e-4e3a-9831-660444080f0b", "sighting--ab8a82ab-43ab-4a09-a9c6-3983ba20002b", "sighting--06b13d2a-20f9-48fd-853d-f00b6ff99bcc", "sighting--5dba250e-88ce-4ba5-8e86-92a24785b802", "sighting--b52d037a-cabe-4fff-a3ee-60b9505ca0c6", "sighting--3cc7891a-8d8a-4137-86ce-1a95bb50aae9", "sighting--0f6e85df-9934-4799-aee5-a94afbfa4234", "sighting--1f342c0b-5bee-4a41-9562-1c6ed05960fa", "sighting--7655ea90-8ece-4fa2-9ba7-5cd93556cd6e", "sighting--8a36e889-3474-4ffc-8f5c-3a0dce1a25ee", "sighting--527f89f0-6b74-4cbc-b496-a4efd3401155", "sighting--72887fbb-7efb-413b-be9b-eaba687d7063", "sighting--22693dda-8685-4ba9-80bd-e040830c8f53", "sighting--2986d828-ead3-4051-a830-97f0d6350eef", "sighting--186da558-66fb-4696-8768-f00d51380366", "sighting--e864a3ff-2ae1-4257-a2ff-41f35d658a95", "sighting--1d0ab17e-2ea5-46fb-ba42-7ec3a2d68673", "sighting--8460c8f7-4465-4e02-972b-4cff4a2bea96", "sighting--b690d285-1039-449c-bd79-54427544d66a", "sighting--8b7cdd0f-dc07-47c0-9a8f-bceb6e27c1a8", "sighting--cae160c1-2c73-464c-bebe-fc44e7c72896", "sighting--d8e2f9bc-615d-4d87-8431-3a9fa9e29e04", "sighting--faa3ed0a-7802-4c34-b0ab-dff04cabfd31", "sighting--23485e2e-ad43-42c8-af5f-a44c3acac5d9", "sighting--acf32cd2-784e-4bb3-93d5-4c68727cc07e", "sighting--4145b23b-2cbd-4325-8873-86866c539f42", "sighting--e1512f26-3f62-4aaf-8863-19f08a847dc1", "sighting--9dd968f7-6d50-4a70-b581-3213dd41e4c4", "sighting--b9054924-d59a-47d1-96f7-e69a35a2fbf4", "sighting--640fe901-45dc-4546-a806-d56dc0542183", "sighting--da8806c5-b9d7-4d6f-aff3-72c2646892bd", "sighting--7ecb486a-20d6-4d01-a8e4-c6a31682b8d1", "sighting--b9c3f1fa-bd85-4e43-ad31-89da337881e4", "sighting--9bdf7114-32e0-4aa0-b0fc-d7791a3bcb5e", "sighting--f086094d-9d95-4cfb-882b-f65b0a331378", "sighting--9929e7ba-674e-47f0-bd81-e24099b413d5", "sighting--6f74b9b9-5d3e-4553-9ba8-203c853c623c", "sighting--003ba682-aa67-4b6b-9ea6-7acba15157f3", "sighting--1415f5eb-f8b2-4aac-be5e-62d59fb0d224", "sighting--e3af6da8-a597-4a07-bdf8-65434e876457", "sighting--e6fb7bc3-e0e1-42ab-885d-0e4ded4b9349", "sighting--8cfa3097-7510-4707-8d9a-c8f3b6114c18", "sighting--4f3eb1f2-7e4e-43d4-99f2-45e5ac1f5d2c", "sighting--6dc60af1-f310-403f-a069-8515f43db8ee", "sighting--628405de-ae38-49ca-bc80-0a398fe9524d", "sighting--93ecbd36-fe65-4a4d-afae-961c5a570c87", "sighting--db104226-1312-4d5a-8895-4b9b838d86d9", "sighting--b76a9dc2-3b5f-44f2-9c12-93c64d16635c", "sighting--fa6c042d-72fe-43ba-af8b-5479dc8c8d1f", "sighting--e5aacbfc-6f1d-49a0-9389-f1cb50e0f092", "sighting--3245d5f1-e6e4-4ecf-bc7d-450a63c20c62", "sighting--ddc64751-2d1b-41bd-836f-a935c6a9262d", "sighting--8e06899b-998e-48b8-9242-639bddc3db89", "sighting--4fca784f-3f42-48e3-8525-6034470876fa", "sighting--ca64748c-4d0a-4011-9af3-3dc94a1d1bcc", "sighting--345bfb6f-c625-451b-95ae-19d685625601", "sighting--b2cbdc9c-08d7-41e5-a61a-bfc4de61c1a7", "sighting--a0e794a7-9a6b-417c-bcbb-507c87e584af", "sighting--a83617a3-e579-4e91-8614-9b023c4d848f", "sighting--5f146687-a7fa-41c3-b184-809c5c57ac7e", "sighting--56d8ee76-02a0-4ece-a4b7-6aee9103cb7d", "sighting--69d6a23e-cbc3-4ca0-9d64-cecdb2f36dbe", "sighting--6e4f7147-8eb5-4b20-a58f-96771f83fd43", "sighting--81b3d4c4-1833-4ff7-a489-030338d5b192", "sighting--3097ff56-5a3d-4e5b-a3e1-187f5370cf0f", "sighting--69e11887-e0b8-43a4-8906-b317633d4501", "sighting--ec977e5f-8279-4459-80ac-7c7dcae5bcb8", "sighting--97743287-2ac7-4d47-8165-38a231bb00fb", "sighting--9b0fad1b-0b40-4edf-97bc-e3d54e3619a2", "sighting--6efbf325-bf60-4d81-b670-cade52aa100f", "sighting--5a180355-15bd-4ccc-b946-3eeace167951", "sighting--b33a5fc0-3196-4a33-b759-806924dd4597", "sighting--adc828b2-1837-409e-8b5c-8092695cf932", "sighting--e9ed1630-63a6-49a3-91d4-4a70f10c69b8", "sighting--8191843d-847f-4b11-9a64-85f5af8b6449", "sighting--be8743fb-b2fc-4161-8454-e3e6e97750f8", "sighting--dd3628aa-7edd-4158-8979-735172be984a", "sighting--185a1e10-cf6f-42d5-8f95-97e63df62d77", "sighting--e16616f6-1fd5-44dc-ac78-9ce97298ba82", "sighting--c67ad014-d7f2-44b4-9017-976a719795ae", "sighting--d98b1944-065f-421f-a173-ab527a3bc425", "sighting--dcafe60b-df98-4a51-b211-3cc8cc3af381", "sighting--52add88c-bc95-40d8-936e-063d1255c3ab", "sighting--de247763-a6cc-46b9-94ed-3a471a0e2aed", "sighting--c872a17c-aaf5-40b2-848a-9abda587ab1f", "sighting--f01fb9c5-82da-4524-97f4-408ff4945603", "sighting--c64f8aea-f96a-4f12-a3e2-f180152f295e", "sighting--ec13b2a3-3b10-4218-9990-da6216e918a3", "sighting--976b7c5a-d37e-4b04-9e8b-b0f440506585", "sighting--2b5253fe-bebe-49b5-8a47-b8a8512903b6", "sighting--ae6cd41f-02d9-4f36-a7ef-d3cbde61e8a7", "sighting--26184ce1-587b-4a61-9e27-e4a801b59e66", "sighting--573cbd5a-fb99-45cd-8f55-ee460cac0738", "sighting--c9d46b1c-2847-4557-93f9-806dd363306f", "sighting--fb7def7f-56ec-4001-a180-86bd29e072e6", "sighting--9aa7cb68-71fa-472a-8428-5b1cc289639f", "sighting--c863d248-c4c5-4205-a9b5-c7629ea95832", "sighting--232b6666-bf07-41a9-ac99-630a9b8cfc31", "sighting--caeb7756-3378-4b2a-8f7d-580ac3b72280", "sighting--5e3a90ab-4041-46ec-b59c-41be38830e4e", "sighting--32d538c7-98b6-4717-acc7-2e5c1feede62", "sighting--94b96f9d-b72d-49dd-bdc0-cc38a6ad91aa", "sighting--d07e0763-26fb-4e1a-9ddb-ea8523af5a83", "sighting--89a878d3-ac88-4977-bf89-850d10e770d1", "sighting--92819eee-3527-477f-95a2-225187f951e2", "sighting--d2024315-900f-4376-a719-40209ac2549d", "sighting--150f6a83-7b95-4bdf-ba4a-64f17f703649", "sighting--1dbdbdc3-c016-4aa5-9dd8-962b09b516b9", "sighting--e9e2e8e8-22d1-48a9-8008-d97befef19fd", "sighting--7eb348c9-f734-43d6-9743-9f7d7d5b6b20", "sighting--8a8e5766-5ff9-4e7e-a836-e238a5b7b104", "sighting--ce87d7e9-07c6-460d-a2cf-8f604469ed02", "sighting--242e8b19-3d36-4235-bae9-28465e276a64", "sighting--468d73e8-172b-4144-8939-ee7017696bae", "sighting--95d8c3f1-9f70-49e0-b26f-f6c603000b8a", "sighting--1423475c-cab7-4c33-a43f-a420cfad53e7", "sighting--420ef9c5-1964-4116-ac0b-6bb4e05e2d37", "sighting--8ae089b5-20f5-43bd-aae9-7f6d1d2db9f9", "sighting--d07cb6c0-fe23-4cb2-9801-d7a1af448876", "sighting--83dd36de-4a67-4b78-97b8-8807784e5152", "sighting--647bdbee-7642-4d6b-a707-c06344f6fef1", "sighting--bc8df90a-b76a-4c6b-b174-845517a6a2b9", "sighting--25d5727f-31d1-4769-a4b3-88af9f66b9d4", "sighting--a4a6ab04-5474-434e-9967-b451f4603bde", "sighting--c3f2e8cf-790a-429f-9a73-ea94b9c7d3a0", "sighting--5a9a996d-857d-47fa-92f6-8d5af6c99730", "sighting--e3dc625d-ff3e-4d31-a044-c593cfd899c2", "sighting--500e132b-e605-4eb3-97d3-6807a8975aef", "sighting--90ae0ac4-5673-4929-9756-47d2b55d3cec", "sighting--a2c5d6e5-b46b-4cee-87a0-be08fe23bb19", "sighting--bf86764f-c085-46e2-a052-7d0ac67b3e09", "sighting--6accf6aa-0dd2-44f3-bb28-cf103aa9e099", "sighting--b9b1fed8-029a-4256-9660-5092fe72e95b", "sighting--0ee9f262-6ee3-4c1c-a521-ba76499c6840", "sighting--b57ae37b-a1c4-417a-82de-990aeaadac6b", "sighting--b22852ae-6822-4933-b0cd-b6a4bf35bda1", "sighting--939fb110-4556-4b1d-856a-597c37308ff2", "sighting--5d7d938d-0c4b-47de-bb40-44080ebbe8eb", "sighting--fe69d1f9-c98b-4b13-9ac1-47305df55e6e", "sighting--3755bf9c-f2e7-40da-8dab-aafbf28530bf", "sighting--643201ec-b77b-429a-b697-4a9c2b1930eb", "sighting--ff1b79c5-c7fa-4aae-9fae-7241749bd9b2", "sighting--27bdd84c-71b7-47cc-984b-3455c7596963", "sighting--bb4fc4ee-6a16-40f8-af79-5cb2b2d4d43c", "sighting--59409b8c-464a-4298-8eb4-71cc10a81d88", "sighting--1901790d-6867-484f-aa98-88dc224a34e3", "sighting--8ed226ce-43af-4309-aeb5-8d3edae57fcf", "sighting--e0d21061-4d3d-484c-b1c1-2c77a7579412", "sighting--f0044692-98dd-4a24-adf8-82dacfd56ed3", "sighting--7bd84881-ec7d-47f7-92ca-0137b6300627", "sighting--18cd2ed4-8730-4a34-a864-566ab10328f0", "sighting--41ce3228-6236-432f-a4bc-4fee33475a31", "sighting--d60fa57e-4fdd-4295-ac15-82ac638eb97e", "sighting--4a258f39-3b59-4c8e-a738-34195f1690ba", "sighting--933b3793-8c08-4d14-a777-ebef3774fd1c", "sighting--05d0fcf9-50ea-4ef1-ba22-efc7b6badae8", "sighting--4ee41ab6-cc5f-4aa0-9bbf-17e43859f0e8", "sighting--16152b34-7918-440e-ad8b-2aa82b474c89", "sighting--97703297-32e9-42d7-877f-9d88976301e9", "sighting--d97cb3cb-97cd-4f77-ac60-37a11ff737c7", "sighting--b9018845-f8ab-45b3-a13e-29dc33227471", "sighting--d3a05fe2-4ae7-4f58-b81e-b6b98fe02e5b", "sighting--7a669fc3-f621-45ec-bb9a-e57d5577b898", "sighting--c309cbc8-f8ab-4e1d-b0af-2fa3bc920065", "sighting--474044ac-0554-4e96-874d-f286a399a7fc", "sighting--d687e611-8fd9-47b5-8f68-7c63b45631df", "sighting--187d7da8-b1c9-408e-ae88-48bfa38c9e7a", "sighting--b6dc43fa-f990-4505-ab42-2d52c832f151", "sighting--98206091-d1ff-4430-a775-c9c1f712eb21", "sighting--7cfaaa10-3911-4ef0-a2ef-cbf74e6e2448", "sighting--ce906b9b-9849-4731-8f1b-6b1a97c3d86c", "sighting--cfaa695e-d6f6-43a7-a328-5106d698a294", "sighting--7c8ffd26-e893-4b9e-937c-caaac8068867", "sighting--df4181e0-ca1e-4331-8b16-34cd754da5f5", "sighting--b07486a3-5c71-4550-8ebf-5eef704514f7", "sighting--948cea1a-3d3b-4fcb-828d-6df1391fa84b", "sighting--e9c7578c-e65c-4894-8033-22419ad8605c", "sighting--13f9943c-a536-4b5f-aaf4-30ec27ef571a", "sighting--32ab5c1b-bf75-4160-9418-b2c5678f5bcd", "sighting--dd16e7c3-d7bf-4325-a023-e8ce6ed6b812", "sighting--15e19c23-f31f-4d7a-b547-a0c6bc6b3a5d", "sighting--5c520288-0bcc-4ef5-b1cb-634627fc661e", "sighting--8cdf511a-4f5a-4447-8e39-a0757bef18ae", "sighting--fb20f517-b2f1-41fc-9c47-b9da43f29677", "sighting--214f25c1-7d75-42d2-80f9-52a4bf0f4459", "sighting--cb03ff44-cf3a-4644-b161-3360245c9eb9", "sighting--fb68edbd-e597-44fe-8d18-3c7c8dfd644d", "sighting--af38df86-a80e-4fca-900f-265c6be791ee", "sighting--9c74108d-a545-42d6-861c-eca98321e901", "sighting--094a675d-f3a8-4d29-9168-55b7a482e7ed", "sighting--6f302068-d24c-4d2c-a74f-0951433b2dca", "sighting--e8f34030-2929-46e0-bc91-f33082e9c212", "sighting--45bcb993-6b16-42d7-bf79-d1103fff9829", "sighting--91f366c9-4de1-4dec-9b57-622c507bdfc0", "sighting--e206af5f-462c-42d9-951c-0f0fa1e86d04", "sighting--a8d3cbe6-b81a-4180-ada7-2ca5b9f7a08a", "sighting--76096539-2a4f-453c-84b5-888bfaecb6b9", "sighting--a78a721a-bfc6-432f-bb47-a3eb75a096bb", "sighting--2a4b6794-fba4-4b84-a72d-1411c6d75e6f", "sighting--17023a07-364f-4520-bf65-edb5caa406f0", "sighting--3e0e388b-1141-49e1-bcc4-8387635901bf", "sighting--65c0a44e-03b2-4dee-8ed6-573d4dc3a172", "sighting--edeac397-9c87-4551-8417-3f6b273bba91", "sighting--dd66b437-e7bf-4f47-813f-48a5f136aa7b", "sighting--54529513-faa2-4a94-ac45-aa8c1c87c452", "sighting--77ff1e62-1050-4efa-8e05-d8814666c092", "sighting--f4cdbd33-f9a4-4905-aa54-ea16142ff227", "sighting--ad18c1f3-122a-4f27-976a-422332156d7b", "sighting--a7be467d-7a9d-435e-81b3-3c6c1d6b6140", "sighting--0a8b0b5f-4dbf-472c-aa9d-d7c74c8dfd4a", "sighting--8b8e88bc-5f9e-48a8-9d56-32545462cf10", "sighting--4b823937-83bd-4a81-99fb-521cbfe0b458", "sighting--dbda9f58-1702-43e7-9ba8-047f244dce21", "sighting--44859162-e077-4c0b-b040-47ed9203efc5", "sighting--8e5417a4-ae72-45d1-9c4b-208739cc2d00", "sighting--571b4990-badb-43c4-9723-0610fef424cf", "sighting--5f5c81b8-c541-4bb6-93f4-217e600a02d6", "sighting--71170719-88d7-4f8b-abc1-a2447266ae21", "sighting--ea8d67dc-f71a-4796-8d98-bb7bc9c5224b", "sighting--51c995e1-c4b1-446b-9803-aaea64728a17", "sighting--aca4041f-98c2-467c-b49c-da4076c445ee", "sighting--2b0b629a-1812-4a45-bc4e-9a933878ed53", "sighting--0dbde302-a155-4c15-81a4-66fc96795458", "sighting--fda3e6e9-ca59-4e86-a8fc-293e3ff350a2", "sighting--a3a80de3-2e0d-4910-8123-653d87305891", "sighting--7af0d26e-da0b-48ae-a3f1-d453215335ac", "sighting--0397dcc4-ff61-4ee9-818d-309cf74bd7c4", "sighting--40d5f70d-c78a-440e-b3af-f4d5f57bd7b2", "sighting--f8067b0b-f9d8-4294-be46-1c0d93fe23b1", "sighting--bb6bba6c-a857-42ef-9454-166b9fbb611b", "sighting--c598af4b-84b2-4f3a-b017-50d30c5d0759", "sighting--c70f047a-283e-4e19-8c71-e341797b9462", "sighting--aca120ca-9915-4525-8a1b-8f23e211e95a", "sighting--95dd914a-79ec-4ba8-9efd-38972a8b188e", "sighting--bc6cba2a-1d0e-4433-a63c-4d48394f2320", "sighting--1a321ede-89d3-4ff3-a94a-e67bf31cbf1d", "sighting--0652bc32-623d-4767-ac90-fd6b44068efc", "sighting--65e2f130-86ef-4e2d-8994-0e5809780890", "sighting--91531d31-be60-4d7c-bae3-793aeeee4d54", "sighting--e27df396-b85e-40c4-b84c-b5b04fa2fa1d", "sighting--c7551418-1147-4699-80eb-5f2c04037796", "sighting--0c90aa20-d93e-4a28-b2df-2bf9f6b56287", "sighting--7693bc5e-c518-447d-99af-1cdc0bc1fd77", "sighting--ffcf2c85-f0e9-455a-a136-3643c613d813", "sighting--642daf2a-39a2-44f3-938e-d4989cff6a8f", "sighting--14b0eb6e-8c45-4156-8f05-08526a7eb40a", "sighting--157c1a69-5362-48e6-9145-f59e7dae7817", "sighting--acc6d456-528d-4e55-80c7-bd815f409c6e", "sighting--fc94446b-fdb4-4b45-876c-44835ba14421", "sighting--79f73051-ac89-4b46-b775-b1f43d18ba27", "sighting--fc12fc0a-8b6e-42c2-a333-ca95401c9e6e", "sighting--9c045411-58f7-4026-be40-e3a9f39d3dbb", "sighting--9e5b6a8e-e230-46ca-9ef1-fde5638f5d84", "sighting--1650b75b-ee8e-4356-847b-36778c3e3dc5", "sighting--0b9d4d76-a184-4c02-ba1c-41d2920bbc9c", "sighting--801bb521-23d9-450e-bd88-b88aa7ed46a6", "sighting--3569e67d-a748-4062-8a1e-971680b0dfb0", "sighting--88078a32-fae0-4951-b165-36263dfe782a", "sighting--3e47d325-af1b-4346-b1a8-1ea14f4a9d53", "sighting--c0a3f1e0-7f25-4dca-a769-90f935f5cdab", "sighting--f52fe6fe-b100-4aa8-b293-b7a23f4d00b7", "sighting--95679a70-7c28-4c7f-8c1d-2fc8f92416df", "sighting--416b8884-a1b1-4d47-9675-271978887e82", "sighting--e4bbcd39-16bf-4198-93c0-5c31f5fe31dc", "sighting--c8bc48de-221a-417c-aab9-5173c084c74d", "sighting--e2150d47-ea8f-4f15-8a42-077059ad27db", "sighting--797312e9-c3c8-459c-89b3-e67620b467c2", "sighting--c2627ef9-4760-41cb-9f38-f67dbcbadc79", "sighting--26c2080b-c638-43d8-b22f-1947781cca81", "sighting--803b96f4-2b86-4ca7-8625-9e76c5f2d5e5", "sighting--1c43c83f-2b61-43c5-ba94-b2fdadd5c0de", "sighting--0b4636fc-610a-4668-bcfd-441f617d1d40", "sighting--79f67f2e-6c80-4ddf-9441-8b48311cf6ca", "sighting--f98f1b87-80bc-4899-ae2f-79e91c904037", "sighting--386dee8f-e325-4130-aec6-15fab3a092ba", "sighting--52fe8788-a13c-4599-b155-33be643e4af1", "sighting--a2dfb925-ca3a-416c-abaa-975184878ffe", "sighting--f6a6aae4-117b-4268-b833-8a0b0624633f", "sighting--79175949-fcb3-4d6a-bff2-372c1188a8bf", "sighting--0c8a83b4-a1c8-43b8-bd00-d94a8b386f2c", "sighting--e8a9fad3-089e-4b5e-aa3f-ba72dd2024fb", "sighting--1cee9dfa-bd10-4393-86a7-80458033742c", "sighting--cc4bf14f-b374-42f7-9299-0b98efe07818", "sighting--41d35b3c-10f8-4462-97c9-b4e54f9c0735", "sighting--d6f66641-d247-492f-9814-99b946c3d547", "sighting--3fe9f26a-6f40-4845-a4ac-1493d54af9c1", "sighting--56c83d2c-0e63-4261-a66b-94ac145073d8", "sighting--88203502-c1d6-4578-bffe-903a5f18a5a9", "sighting--f59965b8-55f4-4fae-baf0-f0b215a02348", "sighting--c5bf230a-a4c3-4988-a518-be76cf6ace3f", "sighting--b86c671c-3c63-4148-b938-394a31b066b0", "sighting--23784bc5-441e-449f-b45e-d7774c7c9db1", "sighting--7cf20b09-138f-441d-8bdd-5ffe2de52876", "sighting--d485e452-4ee0-49e3-9d4f-c6448b8dea10", "sighting--feac8b54-3a4a-412a-b236-d04f5925e24c", "sighting--33c9a3b2-cde2-4f85-8894-d7ce16e51826", "sighting--adefcffa-45a3-4ee9-8f87-15878e5cc98a", "sighting--0e261487-a5d2-401d-916e-dd8a0faca48c", "sighting--7321ca13-3dee-40ea-8501-2046263492a8", "sighting--adb9a251-890b-4b05-ba4f-c5cb206cfd8a", "sighting--2b7cc93a-1e00-47c0-a49e-bf88e3784256", "sighting--59718618-8e86-4383-874c-3116fabfb210", "sighting--fe06939f-d472-4ce7-9ab7-f01368851514", "sighting--ceb22081-c027-4a07-88a6-3338a95c6fdd", "sighting--5a8f1e78-5f68-4b87-89b7-35216284a94b", "sighting--0b05792e-2994-49d3-8810-cd19ed8ca628", "sighting--50f0874e-8d14-40c5-867b-ad0fdf599a1b", "sighting--56f1b22a-be34-418f-9cbd-883c76335a30", "sighting--79128924-cce6-4030-bcd3-9ac4d61fd67d", "sighting--bbd4f2ee-874e-4b09-9b55-30ff58947ca2", "sighting--8f66c6e6-6437-46ae-b2ed-82b4d24f8132", "sighting--df1939e6-fca9-4609-a6fb-5a0d57801529", "sighting--17e41421-701b-48ad-b2d8-e70a44896a45", "sighting--e94c1494-854d-48a3-a720-a7fd40dd6320", "sighting--0f9ee251-8de5-4613-a798-984b322d3313", "sighting--ebcf1ea6-6ce3-458b-b050-251fdf46e98c", "sighting--bfe4fd95-d5cd-48da-b3b2-3b873fc4eb8e", "sighting--868ddb7e-a8dc-46e0-b504-f5432f43613b", "sighting--6fb2f88d-f8bb-4cbc-8119-b09f6c6dfd10", "sighting--54be645a-30b9-4d8e-b801-6c9441164b7d", "sighting--d0da8fe9-10fa-46cc-bc8e-7fa69802e430", "sighting--d1be1ce2-0ae2-4e83-b928-ebfed9627635", "sighting--d1ea550b-a93a-41c4-a9c9-bfc4e6929cab", "sighting--6713d8b7-1a92-4c7a-a923-be45248cc5bd", "sighting--ab7225d5-ecf4-4e40-bffb-82a06844b85c", "sighting--679e1479-e8e3-4cb2-b242-706692b29244", "sighting--e5cafac9-11b0-41a9-8218-adbdb917cb18", "sighting--07c638d8-57d7-4c6e-852a-9e3a6e7956ba", "sighting--81fb4551-a436-4fc8-8467-ed4f9283ca9f", "sighting--3fe9dbb5-6f7f-45b4-ac4d-fde8e10ecaa2", "sighting--598ea17e-7086-4e0c-9bee-bb05656d2a40", "sighting--f35307a2-bddc-4be3-abf4-be6e72781b9b", "sighting--f5c22884-01bd-4a77-b373-e1f27e9960f4", "sighting--abaa3e25-d7aa-4053-9da6-4a9e500a484b", "sighting--dbe8fd09-2ef3-4863-9d85-7ada175e5fd3", "sighting--62977320-6866-4929-8d6e-0f875365dde0", "sighting--c62743b1-8e19-4a1f-9396-dda9ab1e6372", "sighting--dbb92173-bc4d-45d9-8229-ab7bd37e82f5", "sighting--8458f1ed-c2e7-4d53-8040-c898d002aabe", "sighting--f5132e99-e27b-4e39-9480-5a154857334e", "sighting--fc3a12f8-08df-4de2-88a2-c20cbc119e6a", "sighting--b289a7fc-b26e-4c76-ac39-62f639e8a3f4", "sighting--5f1670f2-7e93-4f46-accc-2bd775cf7941", "sighting--f9733730-ead4-4350-bd20-0bf7dccc9c4c", "sighting--efa7ea3d-450e-425e-9d88-b590824b2ea0", "sighting--315aed1e-f5d6-4a15-972d-649af83ccf41", "sighting--ae04b025-2778-4531-b8d2-cca39fac2ba8", "sighting--fd794a03-4f13-4158-91bd-a71d33cd6c36", "sighting--9230326e-be07-45ab-86a7-8561625b7e01", "sighting--d4c69537-a27c-40cd-bf58-f86d6af96521", "sighting--a8a96a7f-382d-4e6a-b7f3-7ffb58751423", "sighting--45cc0757-c735-4c2c-a93b-ecfe44ce45a4", "sighting--30677c49-f417-4f6d-8c97-5f16d35ba3da", "sighting--0c1d412a-7c02-429c-965b-ccebdca56124", "sighting--3422ddf6-4d93-4268-b871-a3e1e37e0555", "sighting--ec89f65e-4862-486a-a8bc-b3b19b50c9aa", "sighting--e8a248f1-bf67-4e79-99de-48c1b605a3f0", "sighting--3afad99d-f278-4c0b-9d3f-7d779a8ee972", "sighting--4f317b7b-0f88-478f-88fd-51e1c864f644", "sighting--e2d5da22-b39a-41b8-b649-45ce38b883df", "sighting--6ecce78a-ae21-4e51-b36c-a43092281004", "sighting--dbd43c12-d40a-44bc-907d-753f681e7c4a", "sighting--38d63a0a-63eb-436e-8717-b1f0ba5dc2bb", "sighting--a1e003cd-6d1e-4a01-b1ea-fe853ffc5e13", "sighting--87bef20d-add5-43a2-a92a-81adcf7bf65d", "sighting--518a7e1f-862e-4f47-86e4-3e444f367dc2", "sighting--8e1b3e6f-7305-461b-bc23-1c5dae9a2a22", "sighting--e8e577ee-cd88-4b44-9d72-b3f5393ac8b0", "sighting--fd4a7d1b-12f3-402f-9eed-f9f9afd2edf7", "sighting--c58f7497-6bae-4ae5-a54e-71a52f2c83e6", "sighting--d4a30f01-4d9e-4c1c-8c15-b75c79d42b67", "sighting--acfb369c-6fba-4f79-98d6-f4171a92a1dc", "sighting--1ce5a66b-2542-4849-830f-00f8d9d876d0", "sighting--6bd0aaa9-4643-43e2-95fe-c58c37b39046", "sighting--fcfb75b5-2f54-4665-bee2-8e21ad441501", "sighting--085967a2-d899-4df7-b1fc-6714aeef6730", "sighting--b020eeb6-09ac-4a3d-a6fb-ca98f1497a9f", "sighting--42457da7-5547-4c7f-a3ee-17ff40c2a586", "sighting--c976c29f-2a47-48e5-aa08-a7975c507d96", "sighting--5f7ed620-175e-45a3-a044-eb1e3a232b6e", "sighting--7dba5574-44f7-44af-9cbc-b2ebff5df4d1", "sighting--1f246b0d-6af4-48b4-ab51-e0653539eed1", "sighting--5e23a14b-d2fb-4d3c-a8c3-21d283dd5803", "sighting--1c96c236-2cd5-4bc2-8cdc-ab037cba35af", "sighting--0a23e502-9892-4350-8b74-5029de9e9e7c", "sighting--0e6f560f-9c05-42be-84b1-7f5c3ed9d449", "sighting--f1094a68-b51b-478f-af76-13507f4ae307", "sighting--ffe7eb87-a766-4ba3-8e49-f55e90232586", "sighting--610ddaa8-d6ba-4a85-b593-c61d7192fc45", "sighting--dba69ccc-ce3b-4c57-b5fc-215cfd412981", "sighting--fddb6f00-ca34-4041-97dc-a6019ff0fac0", "sighting--11eebafe-421f-4c8e-abd3-ebcfad776abd", "sighting--a6beadce-8cd2-4005-90b5-1e1b9f9376bf", "sighting--bfbad7aa-9766-40bc-86b3-99a8a441f276", "sighting--db43640f-f345-4fc7-b320-a80e44cada7d", "sighting--052fc5c9-dda9-47fc-8488-c8b5933ed272", "sighting--39afa399-b9df-4b99-9a0b-61e5deeab520", "sighting--bc62c85c-0693-447f-aa7a-2c453cd4952b", "sighting--7a8d29ed-9bf8-4ae4-bfd9-0d7b616ab587", "sighting--4f7d10ed-30ba-4649-a025-83f8518a90c8", "sighting--1369c1c4-5ea7-49e2-84a9-cfcbea51e93f", "sighting--0e81e198-77b1-4388-a52b-d36ffadf644d", "sighting--c844c2a2-fddd-4a22-92b3-3e5e8cd9d286", "sighting--acbe7cc9-2eaa-4c7b-87e9-3a9607e132e7", "sighting--444220d5-1905-4fea-a833-51a126ac2681", "sighting--587c87e3-0496-4fba-bf8c-8489b777a609", "sighting--f7107e2e-e9c7-489c-8bf8-d42cc07c8701", "sighting--607a9ece-9cb1-463e-9b1b-5e2393dee815", "sighting--c82ecaa7-247c-4edc-add8-effd4fdea186", "sighting--1ea38e1f-9c7d-4b0f-a405-a4dc32bf968b", "sighting--785d379f-dee4-492a-97f4-2142d467d509", "sighting--1485f726-f780-404a-9bf5-584402681b32", "sighting--d1a57a42-474a-4a40-a1c4-56fdf6151be8", "sighting--1e460a84-c829-4f42-9047-cde6687aefb6", "sighting--7ae7c248-c62f-4f6c-b2fc-fa2177b68d1a", "sighting--1204168c-d6af-45fb-92fd-e2afcea2c152", "sighting--0c350e69-7c82-4d2e-a3d3-c2e29d3a2fa5", "sighting--3827d89f-fec4-467e-9ad3-3dc90b53471c", "sighting--68d974a3-b31a-4697-9598-c87583ce3d43", "sighting--7e10555f-7d64-4988-b627-d1a43014b2da", "sighting--c4d8e9b2-1e60-457c-b121-c314b62ff341", "sighting--6edf347c-c9d5-470b-8803-ed37eec39915", "sighting--7108d9f1-85a0-4be7-b5f0-6928b0303e3f", "sighting--cae6300f-95f9-44a3-a208-a85a81a81b51", "sighting--1d54cb95-6cfc-49c4-bee9-1b297433c923", "sighting--1ee0c540-5a55-4fb0-8509-83df5793ae42", "sighting--2fe37101-48b2-4e51-8fa6-f97513dba4db", "sighting--6ded56d5-e25c-4b23-ad2e-ab8da10f5d3b", "sighting--2a2523b2-7572-4b73-89cc-e9891b1f4cbd", "sighting--48ee6e16-7636-41fc-a7ff-d0bc181b52f0", "sighting--e141b5bd-d3b3-4363-a38e-cbc7fb67de62", "sighting--160cfbba-6c03-4ffc-b455-8c86070ac301", "sighting--cb00472d-6aff-4a3c-8116-66cedade0740", "sighting--d4635be8-1d1f-4ef1-bffe-38a072e978fc", "sighting--f099e409-b830-456d-a1d6-5b3dd2e0aeba", "sighting--f5ce69b3-47dd-4b69-984a-f0116179fcd8", "sighting--a45a6af0-0bb8-49ec-bdfa-a001b31b10e4", "sighting--fcca0623-78f7-4de6-96d1-3e352a9bd95f", "sighting--9daf0768-ddb9-4e47-a3f2-e8999a02985a", "sighting--d5a1f428-6ad7-4ccc-9171-31e83b7e08aa", "sighting--7abb93d6-a135-48d7-b4ac-161b3403ecf7", "sighting--ba68cd7a-2e56-4e01-b5c3-33aff3e0db4f", "sighting--9da576c2-ad89-40aa-ac0a-083a2fa74229", "sighting--4e788b72-2458-441d-bcf0-d074c9297906", "sighting--bb6e80e4-7213-4fac-82ee-7dddf3923099", "sighting--725b1092-00f2-4fe4-8d4d-48430f57a208", "sighting--a6456a0d-2411-480b-a21c-a46ca9d612dd", "sighting--9384abeb-0a1f-4b74-a809-0463e41371ea", "sighting--ad8e036e-7cef-4e75-bf3a-c9082b231f81", "sighting--94aadc2e-77ed-4ef5-ab64-8335fb1b64a5", "sighting--3453475a-53ea-4eee-a394-a21230320225", "sighting--1d8ecdc4-ac9e-4760-becc-0d9c30b3a40e", "sighting--27838401-94d3-49a7-a4be-06f78c24819f", "sighting--24ab0fd7-e95d-470e-bedf-7027e113e986", "sighting--2579e6ca-6b5b-41e3-8caa-2381998e64c0", "sighting--0909b386-8398-4891-ac98-2bc6d950a6b0", "sighting--e5895af5-6f3b-431e-b3d9-cdf664b3c834", "sighting--a8112bfc-c844-4951-b085-b6185e14eab1", "sighting--b40029db-5676-459f-8f89-570716f7db73", "sighting--8c89919b-ebf9-40ff-a68a-efd481cdadec", "sighting--99dfa6b5-c912-43c5-a77f-89f5d55ccca0", "sighting--a3887936-330a-4319-83c9-603f417a5a3e", "sighting--0bc8dc47-1cdc-42a4-8116-081b272e8e3f", "sighting--7624636b-89dd-48aa-97e7-14e65bbd8f41", "sighting--98ae57f9-5f9b-4f6d-a631-fc7f3d098a29", "sighting--c3df9484-054b-4768-89e3-a34766e0c1f6", "sighting--f93d982b-84fa-4a8d-9983-0425680cd012", "sighting--af29fc7c-79c3-407e-9dc5-0baba67e2188", "sighting--753bd00d-c552-4dff-a68e-b49f216feb05", "sighting--824fdfc7-a65c-49b2-ac5f-4ce5f41786c6", "sighting--87cb2c20-2a95-4587-954c-a4fec2effe57", "sighting--36fdf8b3-09ec-4364-bcff-5625417c5267", "sighting--6754a2fb-999d-4e16-bab1-e219a163a822", "sighting--af75973d-f670-4f2c-8ab6-4d1548a89c90", "sighting--f1093827-daf6-429b-80d5-a901c5e08ac5", "sighting--7d9c5b74-24a8-4309-b65c-4afbee5a7c6f", "sighting--dd0abfc3-9433-4f1a-873d-153e3b30acf9", "sighting--d0393df7-2ca3-4f23-859e-003b16127809", "sighting--a29e974c-6bee-4d34-a501-abe7723cfc8d", "sighting--eb964009-4789-4dd7-b6ef-f001af77dfaf", "sighting--d5a2b9c1-799d-4ef9-80ac-2119229f84fb", "sighting--e7bb50db-eddc-4ed6-92cb-8362bb0d0575", "sighting--8b592762-2a76-41e3-a7dd-0e4fe8bc8f20", "sighting--4445d06e-a293-4396-a574-eee2a979ea8b", "sighting--472d6eee-a35e-4b01-a49e-689f66b5f732", "sighting--0964ae0f-69d2-4bf9-881f-7af55537f46f", "sighting--ab658128-1960-4ab2-8d84-a9b2bdadf9e5", "sighting--716a86b1-6fff-484e-a1d5-73059a17d7a8", "sighting--9c092a94-a7a9-4b33-9772-08b163e23a6e", "sighting--f3ae013c-6870-4a3f-bb8d-9e8d73f079ea", "sighting--389fa98d-354c-439e-966f-3e11af694d43", "sighting--b58c5276-1488-48be-a00f-a8e7c3a0664c", "sighting--4a0cb3c7-cf5b-4b9a-a533-b3ec7affc6e3", "sighting--f19c1062-c3a1-412f-8b8a-e5eb390f31d6", "sighting--3be95dcb-b337-4d56-96fc-dab5b55bfe76", "sighting--4a5c7270-85da-4eab-a4c9-7520d89279d3", "sighting--e8b9d860-d39b-4208-84b8-e4563cb867b2", "sighting--3aa606a3-d670-4cb5-abb0-fa87c0ef27cd", "sighting--2ad95cf8-fc20-4849-98b6-149b74c296b5", "sighting--17a20bbd-60e9-48f4-baae-b1767c031635", "sighting--bef2e7bf-8b14-45d6-8bd7-19db3a4c35b0", "sighting--80c73297-bd45-475c-a1be-aafa4f4e71fb", "sighting--76d8c31b-a042-483a-b642-de3a9435c8c7", "sighting--891f0ea7-8673-40b3-96b2-80ab71f8b9fe", "sighting--cfd6ac09-be7c-4983-aa9b-f984a6000071", "sighting--7b65201b-a4c6-41ce-b66f-b967e811acd9", "sighting--9437754c-90de-4ee3-a273-d1e0bd59260b", "sighting--334eaff4-b681-40b2-be92-7f842c2b33cf", "sighting--62a78c78-3794-4631-8fd3-59a540828fc8", "sighting--3be84b71-5a8f-427e-a06d-fd28173fa053", "sighting--c3ee9e56-f9c5-45ed-b191-70560383bb18", "sighting--178e59a8-8c67-40f3-a5c3-f76a67f063b6", "sighting--c98ede1e-6550-4270-9e1b-74bf0ae925ba", "sighting--881ac652-7efc-4782-8366-16ab6cdd2a10", "sighting--b075cad6-8dc0-4ad7-84b9-6a88ea3045c5", "sighting--35b1cb4c-d9ac-46b1-972b-959df6d5bcc0", "sighting--c0b46952-12e8-439f-a167-adf04fecad22", "sighting--47d1fca0-2401-4f0c-8266-f809149c49bc", "sighting--62c55225-b2fb-45d4-a08c-6bcef072c576", "sighting--bd9d3d39-e24c-4d21-9127-cccec15c2722", "sighting--a26af1c8-36f7-4d2a-8bf2-4b462669c907", "sighting--40a7abca-b6df-489e-b3f3-fb16b6bd86da", "sighting--3f008414-f17c-47a0-acb3-75ec2da07d7a", "sighting--245ab792-d533-452c-a86a-245ffb07d08a", "sighting--b4af3627-0e4c-4bfb-a676-3fb4b7b9dd0f", "sighting--248f1422-790d-427b-8613-8c6fa873c249", "sighting--13999e76-9800-4083-95af-a36acebbfc3a", "sighting--ec958124-da02-4d88-8e12-dc11833d93c2", "sighting--e6d902e0-75f9-441c-8ebe-8b8ac4407a97", "sighting--5a10b784-f486-4402-9d49-615280c3a269", "sighting--29292b45-5c71-4531-a1c4-7f8eac99e0f9", "sighting--15c308c3-fb54-4801-8b14-7ed7db0b8e7a", "sighting--80bc0aa5-b52f-45d4-9fa4-62b16ffef0c7", "sighting--4d1b8e3b-4f47-4048-8a24-25135d0c17e1", "sighting--7b3c6957-3bd7-4596-b705-512848caea36", "sighting--7bcc267d-bb4e-47f4-8697-0dbda0cabdae", "sighting--c9e2641d-17a7-4753-92ff-a4d2ef23df67", "sighting--3de8d82d-d8f5-48e2-8612-662d75fb2bf1", "sighting--92f1861f-9446-403c-b030-cf7eaa2981ec", "sighting--50d9971d-929d-4656-b344-ebe398e0bd78", "sighting--9dba34cf-8e95-4c20-a937-39fe8c25bf36", "sighting--a03d120a-c548-4c5c-892c-81ec7ff1a92e", "sighting--b2f60914-22c2-47fb-adab-f9054036d23d", "sighting--7ee5d70f-cdb2-4978-b4a6-2f902f4062e2", "sighting--4335f0dd-5add-4fe0-a669-1430130b8b70", "sighting--6e22e9a1-4db6-49f5-be66-0ad6a4931a2b", "sighting--3fd28f85-91d0-4ed8-a0cc-b87c930b08da", "sighting--885f04ae-3648-4a8f-b395-8b45b23ce806", "sighting--dabd757b-1195-42ac-9fd6-b2981b9245b9", "sighting--3822f1d5-b656-4c40-be5c-4ebf9b45d9b3", "sighting--0cb0da5f-ebbf-48ee-9f65-cb78705b96f3", "sighting--a6e8ed67-b8bd-4e0d-a44b-4fc13f953e00", "sighting--e5bf9be5-07fd-40d2-a4b1-86dc46c2e098", "sighting--bf5a9459-f9f6-4d8b-b396-5980285dc9d2", "sighting--4c64bcb3-e12e-4677-af2e-4942d8f57e4b", "sighting--25942810-f2ab-44b8-8d60-554354598f3a", "sighting--a582caf8-cf1f-43ce-a526-0ca07cd16b64", "sighting--e1d40154-addf-4974-adb4-c5b1ec9c83c4", "sighting--9d9f6812-02bf-4818-a940-db76beda6731", "sighting--6a158725-cb8e-4641-b661-a543e5e71d24", "sighting--b00aaaea-0d01-45ac-8ec0-14bcf9d057af", "sighting--3a6da5d1-6f80-492e-9da5-3a74de8e9b3e", "sighting--26e16017-51e6-435c-9a08-195070e67ddf", "sighting--3846e903-610a-452f-b5da-90d5a45de56b", "sighting--2f183320-601e-4f0a-bcf9-c6d842fe9561", "sighting--77611bdd-ac63-4733-9780-eb7c3e96978f", "sighting--5ed23e39-0f4e-4968-935c-ef285a699448", "sighting--0c199b93-6867-4fd3-884d-9a8f7a720c7e", "sighting--dc052c4d-8a8a-4e44-9e43-195968ec6e47", "sighting--1c9944a7-efe5-4533-bd4d-5ee554f6021c", "sighting--dca70708-de3b-451a-938d-aa9d39d8c94e", "sighting--1e916d63-a004-4cd6-90e7-fbe877be8ef1", "sighting--d781f8fa-2abd-4d89-a678-2282fda1f6ce", "sighting--32ca638d-1ac4-41a9-ae46-8c72fbdcddb7", "sighting--6ffcfc78-e2c8-43ec-afd7-3d4beb6a9315", "sighting--2cd4a506-eba0-4014-b7da-284c8442aa62", "sighting--a57439c2-b889-45ff-b9e7-5a74cce6b51b", "sighting--38035f47-292d-432f-97e1-cf97097221f7", "sighting--f89acbf4-d66e-493b-a63e-edfd46749979", "sighting--b45e3f5e-924f-411b-a54d-85a62e4d7f17", "sighting--f233d46c-4603-411f-9558-df01cdd2457f", "sighting--a5948381-8a5f-4769-bbaf-2e10e021801f", "sighting--1c16eebc-4ec7-43bb-8565-7350a6225667", "sighting--c7979a29-08c8-47eb-8bf2-cfb4034d3ad4", "sighting--f22fd4ca-bdb3-44ca-bc2b-b947e932dfc3", "sighting--9c5515bb-df67-434e-8af5-78e423673768", "sighting--0cfad720-6fb3-4c0c-8244-222be47a5c31", "sighting--6e2b84bc-3286-4475-9171-2bce7995c811", "sighting--707d13e8-73f7-4ad6-8ced-c1cbe14c62a3", "sighting--f6bedf53-e1f2-4ce2-9444-389ba61377e4", "sighting--0cd27476-8a56-4dd4-a805-05fcfb7fd6d4", "sighting--88559913-45a4-4eac-92d5-b31442a49dcc", "sighting--8f93e715-c731-4a36-ab54-81d03f0e3a35", "sighting--d2e3e932-9db4-42fd-ae38-cb2f25a21105", "sighting--b7e2ecbe-d70d-4e0e-9f33-77f9e2490880", "sighting--b4db8f5c-b0bb-46cb-8348-07e27dddc7b7", "sighting--2031ec6d-160a-4078-94d3-5a7bfa46aa41", "sighting--2dfdb24a-3dc9-4b3c-899d-1e257bd7a97e", "sighting--51d0cd18-3ef7-481d-97a4-fd9528435610", "sighting--77dd13cb-75b9-47ba-9d65-593e66eb152d", "sighting--0231df70-3789-48bb-9a4e-29de9a37e1d1", "sighting--007d8a4a-c56a-4de1-a337-1d584978b0db", "sighting--428819f3-c1ec-47d9-8b2a-109706c1903b", "sighting--53eeb945-62b4-46da-9e3d-8e60f42d29c4", "sighting--e7cc858b-b913-4ae2-a6a5-a8ebaed49728", "sighting--a2b20824-7be3-49c2-ad60-695e62705251", "sighting--b9dab59d-2b64-4df7-8a22-1b306716933f", "sighting--d1045e29-3109-4ebc-9f29-5ef50ea249c0", "sighting--d76619d0-d78c-471c-b6f0-6c0b9898bb29", "sighting--6bc3596b-6f47-4356-801c-2651cdb0f36a", "sighting--a2c0de90-30bc-4679-83e5-9396bb5e847a", "sighting--ee137cce-d43b-4f7d-916a-5bbb3ab6d842", "sighting--49a0ce39-0d2e-4a80-81f9-cfb40f0be074", "sighting--1871aab0-b3a2-431e-ab4d-34cb0a99e6a4", "sighting--129244ef-25fd-4db7-bbf5-d1e94fcb79e8", "sighting--30b17219-84e0-4195-97c6-d08d3a26baa7", "sighting--083a2172-8497-4086-b900-2d3cbea2b987", "sighting--5f94c62b-197b-4035-9833-81c637e5d374", "sighting--9c318877-6be9-428d-8798-62a6d1fec9a4", "sighting--c0ebc00d-956c-46ce-a2be-c004b333794b", "sighting--8cbd6c4e-61c1-4d01-a6a0-13d794dc3ce6", "sighting--b1030648-2802-4f60-bed3-e589e233418c", "sighting--2bce251b-5ec9-4303-96fb-e0a90974bb91", "sighting--1b404d59-714f-44fa-b393-0869825d32a6", "sighting--160dbcfb-872a-4323-8a4a-0477374f65ac", "sighting--f1f9c0b3-5c5a-4b4f-919d-dd01819882db", "sighting--8868edee-cec2-47e7-b7dd-6b9b976c0fd4", "sighting--c74890c4-2691-49a0-a507-89f0b6ffd327", "sighting--7eaac3f9-7722-4d17-8957-ecb4a4d4cb3a", "sighting--56c5adee-5722-4cd7-9a59-daf8cc9262c9", "sighting--cc2405da-7d7e-4b49-b6dd-c71031a59f56", "sighting--65963f3c-d1a9-4da2-950d-aa3fa452ab69", "sighting--50a9c420-0e2b-430e-a9dd-43754d9863c3", "sighting--55adad54-0200-41e6-a1c4-3832a6ea38ea", "sighting--488b8fc2-f847-41db-9898-410666b0869d", "sighting--a2f6e610-1a72-495b-be41-eb4586c39a19", "sighting--0a331bfb-88b0-4c6a-a63a-e29aedac6999", "sighting--b99c6089-32b0-41bf-9f06-f2d939b86feb", "sighting--cea44e5b-66f1-4549-9efc-35a6470bce88", "sighting--38762f08-843b-4044-8109-576a1357a8eb", "sighting--4072058f-4c41-42bd-b949-828da29b5992", "sighting--1b245091-a919-4de1-b170-e125cdbb8b67", "sighting--d4230356-55c8-4f47-95da-3d8c12a89229", "sighting--64da4a5c-7608-4b33-a2ee-5bb30a015c87", "sighting--35156537-6618-4057-91c0-228e152d15de", "sighting--acd52dce-166d-4cb1-85bb-c1f05ffd854f", "sighting--b239ebc6-a5eb-4cea-931f-e933c7ca88dc", "sighting--81b2ff11-d07a-4191-8184-757107f170b7", "sighting--f857e385-3df7-4a95-94f9-1f0f22cdd560", "sighting--775ab7fb-8020-4a9c-8c5d-24dbbe387b23", "sighting--c85b45c4-52bd-4874-9e05-9b626d1761c0", "sighting--9620dacf-4ee0-46a9-9cbd-351d065d96c1", "sighting--5474fdc9-8b6b-4618-af0a-a9584a5fec63", "sighting--c84012fb-a2c3-48b8-929c-c145b3fac50a", "sighting--7919ea78-0f11-4460-8a56-6c9637b4b233", "sighting--22fb7379-4ff9-41b1-a80c-6a2e604a7f4e", "sighting--362e99ca-a71f-4f08-a7bb-a270fa3871e7", "sighting--52d51555-4d01-4475-9a46-33099762ec65", "sighting--77ab4dff-7248-41e0-b000-eefd55b2e6de", "sighting--0478189c-784a-4292-94c7-4b300a85c1bc", "sighting--bf9b8cf4-702d-46c3-a78e-1a03f93fde14", "sighting--c9bc8849-d1ad-4d9f-9da5-752d8800cc14", "sighting--f0206867-997b-49fd-b216-f774029f7f4e", "sighting--77483162-0285-4e22-b2d0-d09721ef7aa2", "sighting--7053b4ab-0c62-45b7-893f-eb972141af09", "sighting--1591ddc9-b96e-4e0f-9318-a670546a30c9", "sighting--61d492a3-ee0f-430a-9ae1-36ee7e8fb1eb", "sighting--cb939486-c025-4e97-81be-62585483370f", "sighting--180ee248-8b0e-40cb-8dc4-ba2d648cd44e", "sighting--bd2f151c-5a6e-4eed-ad5c-6c7a189f7e59", "sighting--56c67837-830e-49a0-a376-f8991ad15a66", "sighting--ac401581-0ffd-459d-a8c5-dbc847c3557f", "sighting--9d06538e-f77b-4a65-867a-8a69228e2b71", "sighting--c69da725-bdcd-4c41-837f-0327fee58952", "sighting--b48a999e-12df-4637-a987-b61e26d5269d", "sighting--c6ee42c6-f2fa-4e32-9111-2baf78b53582", "sighting--76c396fd-c11d-477a-a40b-8b0b1d772722", "sighting--ee0fa7f6-f77f-410e-82e8-96e53db9c8f3", "sighting--227feb2c-da95-4cf6-9bce-ef3baf8bfbb0", "sighting--8a477051-9bda-40be-9c05-12b7e95f346f", "sighting--fecefbbd-4d19-4ad1-8d24-6ffeead4e164", "sighting--d202ed88-1856-4ba1-aa26-d2ee85c8cbdf", "sighting--9eceb4e9-a1d8-418f-9699-ccae942201a0", "sighting--f83f9f29-0fa0-43fa-b4fc-564eb094f670", "sighting--a324697c-03f1-4ea5-b494-f05da18947cb", "sighting--7689c5d9-df7f-4624-8be3-d6cc50e6f794", "sighting--5f4bf87d-a3b9-4bf3-941b-eb26dee36436", "sighting--be64db0e-8739-47aa-9b79-b3088972b0a3", "sighting--213e46b6-d99e-47d7-8a80-eb5906f9d232", "sighting--3d5cde11-6779-41d5-8152-cb878e418a17", "sighting--987471d0-89bc-48b9-bed2-860c2e64dece", "sighting--740bb70f-0d18-4610-bf45-9b925099b6cc", "sighting--90c5a82e-3fc3-4eb8-a0bd-7c6d9af1bd99", "sighting--9e299011-ec26-4d62-811f-cf3324a62c80", "sighting--614581eb-9087-45cb-b42f-73608632fcd1", "sighting--9a85dfe5-e236-463f-b1ab-042477c5773c", "sighting--85d6a269-2897-4f08-988f-d953ce95fbcf", "sighting--1109f7f3-733e-4877-b4a3-c84bcc8cbd64", "sighting--38d4f896-2d15-487e-93df-66e9a2c34ee8", "sighting--db0e2e62-3975-4024-8ba9-1720e811ddd8", "sighting--47cacc88-a4ce-4d40-ac45-8e2cd19de160", "sighting--f7706e5a-3dfe-490e-9614-4dd723116f39", "sighting--a2999dd4-24f1-4ec3-a420-8de7e6a516a8", "sighting--3a64101f-4802-49b4-9643-f1439af4f8e8", "sighting--e3d5ec85-dd68-4174-921e-02bc88c00a8d", "sighting--f81fdba5-3b8d-4ec5-bc54-126b97e9f9c2", "sighting--bf3c82a9-98f3-49ff-84b1-c66b4cd236c9", "sighting--31a0a554-0486-4500-9d48-0cb286dc21ad", "sighting--f2513609-ea44-4a92-b2e2-fe91666a9ae3", "sighting--33023706-b598-44c8-af01-368051813370", "sighting--a1a70037-f02a-49e4-9d55-08c1b6cd1648", "sighting--1feec532-d55b-4053-aa9a-495ad37bfb56", "sighting--44f36e04-f432-4ee1-a6d1-885295789543", "sighting--5055c98e-e20f-4422-9bc5-5ecd8c1432ea", "sighting--99493f67-a472-438e-8aef-e2e3d425f307", "sighting--5b5403cb-279c-4a16-8c85-837ce0484986", "sighting--d1a501be-1e17-4d98-aab7-f83e40211c15", "sighting--08755a27-0e44-4ce9-ac9a-207d53d2229d", "sighting--904e05fc-8f7f-46ee-9b23-dbb58cf55110", "sighting--27ca7ca3-f139-4362-92fc-5c6cd3e61bcb", "sighting--102374a0-649b-45dc-9db0-9fc9bf977f7d", "sighting--b9e4e2c7-c249-4174-94d2-e4725b6878cb", "sighting--92de4639-9405-43f8-876d-f6085832dea1", "sighting--84b0ed7c-2e8d-441d-a888-4aa9172d7394", "sighting--9306fee4-7fa1-42ba-a83d-b986974e94f7", "sighting--d46c0c79-c59c-428e-a6c0-182aa2828d41", "sighting--75619445-b260-45eb-b0bb-2fc9d22d2c9d", "sighting--766ce9bb-5aec-4464-824d-fe7faa452644", "sighting--86bfa597-a090-460c-b66d-2c8e964684de", "sighting--e887047e-9f15-4224-a61e-16cbcb9216de", "sighting--a455d0f4-0caf-4834-b22a-39239948dd94", "sighting--5f5a0581-8dd4-45f5-8174-595848ed8fa5", "sighting--f6f3f3f1-c155-4053-bb3d-6700e937a5a8", "sighting--7637c585-93ad-41f2-b961-c05229944658", "sighting--112d7f79-3378-49cf-b853-f726169fe4bc", "sighting--87daa1bd-f274-4306-8017-4e74eb5f764f", "sighting--ba082df2-262b-48ea-aa2f-75edfa8de3a4", "sighting--7db463fd-28b4-49ed-a56c-89864427ae17", "sighting--6e362787-3d2c-4d88-acf1-8cc938f9b141", "sighting--d014274b-d63a-4856-a86c-9c02d8fe8d2c", "sighting--f5f23ba1-1162-49b1-951d-020552c90a35", "sighting--971c4a8b-3826-40f7-9412-3f0d6ea4d1a1", "sighting--4af1c13f-c3ca-4fda-8bfa-af90509d2b3c", "sighting--4c8907c1-4cf2-40e2-adb8-d45dcbeccff5", "sighting--e6f6aedd-2758-47e7-afba-90676270aed0", "sighting--4ec4322a-49ad-4f3b-a48d-6de5e03087d9", "sighting--2b89650a-c959-473e-8168-1ec6ebde53d2", "sighting--8da51c3c-7097-475e-a52d-7cf089694f86", "sighting--7baacc0e-3871-48de-a877-71545f2a3327", "sighting--5ecfafca-85a3-4bb4-a222-4277419673b7", "sighting--7f70366b-4a7b-4e09-ac98-6b9fab7cb9e9", "sighting--1d6ccae8-2a60-4da4-9e2c-2faf750393e1", "sighting--20624fed-affb-4c48-a3b0-96f533ae3c0d", "sighting--95879677-a4a8-439a-af30-44fd5483eeb5", "sighting--a048e401-90ef-4ca6-8fe1-59764246053c", "sighting--cbc1f8d2-b1b5-4990-a891-8a6b0e205c28", "sighting--ef439869-9957-4df4-b5ba-c28f5f9a1e41", "sighting--1e45528d-f72a-4aea-8145-29272f31d713", "sighting--0e47f91c-e865-4ff6-b22b-07f47f171cc1", "sighting--b996cce2-b79b-40f6-98a2-a4b9510509aa", "sighting--baaa3fdd-18d5-461c-b6e6-8bb8321b2339", "sighting--37affec7-7b7b-4a9c-94bb-2f62698c27b2", "sighting--e059f1e9-5142-4fe2-972a-a40703b905ce", "sighting--5b64bd1d-2b4a-480d-b702-608f5974b0a6", "sighting--4c2c637f-9ec3-4139-b9bf-a028f0ace04d", "sighting--b539e2e8-6ac8-4d61-9b24-1a1bd5f1a50c", "sighting--041ed9fd-fe70-4202-bdf6-721021779078", "sighting--4719f9f8-fcf2-4795-ad45-0f97160c7f05", "sighting--1398da37-ef09-4af0-8c49-cb3b83739b24", "sighting--54c16473-e591-4113-9761-7ecaca1729a4", "sighting--8b9d123d-6e8a-481f-b54f-92510f0558f0", "sighting--0630fbbd-3c47-404a-b4df-9ba7a7da77d8", "sighting--2a40a987-d4a0-4243-866b-f4ee134c584a", "sighting--b5b2b425-9040-4de6-915b-0b9df37d53db", "sighting--30275471-ff9f-4463-938c-4a8fc5c144be", "sighting--6e4ccc1c-5137-4da4-af49-36f72b797a90", "sighting--e628ce25-d15f-4a16-8294-0753f6a20752", "sighting--6e79ea7a-4c19-4ce0-9a39-4a7bc547ea8e", "sighting--489c26c1-109e-43de-a99f-d989c88eafdc", "sighting--c083ffd2-31b2-47b2-b4c3-9b098032e80f", "sighting--be227990-5277-4641-b681-f153bb415fc2", "sighting--a09f69a9-96d4-4863-ac16-9e1cab13edeb", "sighting--c56409b3-9073-4c95-ae86-b5506bd5db7f", "sighting--4bb38e69-cffe-4294-a0fc-2c7279c05b56", "sighting--b307c259-9d6f-46d0-a220-f41601503eb9", "sighting--088a3c73-051b-471a-b0b2-4cfa9cfc5381", "sighting--3be70ef0-edfa-48ff-a4fe-ce64a45757b9", "sighting--f328e3a4-a6d9-4246-a728-52bd1949e02a", "sighting--93b138f0-f7b2-4f2c-92a4-f04c4073c693", "sighting--5809d8fe-3d90-4867-b31a-1f7abc05bc7a", "sighting--4cee3d15-ecae-4777-986b-b90c1f7e2a01", "sighting--5319d51e-0444-409a-b171-6a3511eb2e32", "sighting--db689768-177d-464c-aea0-1f8017443711", "sighting--78c0d8ef-30a3-4497-889e-da18f2c65648", "sighting--c536bdcc-be21-404a-84b6-0c8cd7c07ef9", "sighting--ff67ad4f-e934-4e2d-b5bd-b60d04c85f9c", "sighting--c2e6380f-dce3-48c5-b032-38181c88654a", "sighting--b4b86145-b873-4ced-9eee-0c1a18f0e1bd", "sighting--11051a6a-280e-48bd-b3cc-e38ea12eb514", "sighting--2e147d1a-8d66-4f48-8260-e7bf3495f6e6", "sighting--cb50ff50-d5eb-428d-87f6-0cb0cd8a6609", "sighting--ed78c193-d49d-436d-bda8-8a474bf2909e", "sighting--dcb596f3-1d6c-44cb-9471-703beea696f0", "sighting--dfe71aed-bdee-41b6-81f7-4a30791ec689", "sighting--6a441276-65a5-43ae-9fe3-cb34bcfae679", "sighting--1bedf2de-47f5-485a-b1ca-3efbac3192cb", "sighting--734331ad-3533-43f0-a1e1-2a5e2bf5edcc", "sighting--a5f95e95-21ae-4c57-a913-d8da8c38cb78", "sighting--b363a88a-0099-4540-991c-611a8273e05d", "sighting--ab8265b5-bce7-424a-a092-3ba161119995", "sighting--ab3ecb2f-5c58-46c3-ab94-5f8d5761f5cf", "sighting--2290d13e-0431-4ee8-9efd-5f0952dd40ea", "sighting--59f40383-622b-4cad-a6e9-1c2d8ab566c9", "sighting--a83ddadb-a1c8-4ff6-b0e8-2698c6af2df6", "sighting--e5a83c37-2128-40a0-a003-f6f1bc02bcac", "sighting--63d6dbe0-67ce-4f6c-bfec-340cc4540b46", "sighting--212165ae-70fa-448e-919a-54e2dd89b7d7", "sighting--485ed2be-bd7c-40e9-85c2-3f38a52b9b62", "sighting--fc8f0112-cdcd-4de7-8792-f2d1e0fd5e62", "sighting--373cbd9a-4601-4fab-8307-a37c576026c5", "sighting--25bd8eea-407d-4419-a79b-f27a4fdf6d82", "sighting--80d79ca9-996f-4e6c-a06a-dd3fd8c3224f", "sighting--6512092e-1fbb-4849-9fa2-020d946e9568", "sighting--ffc76ca6-8f4a-4dc1-9d4f-f6fd6b18ff1e", "sighting--5b392a98-0511-45ca-a116-75b257581b8c", "sighting--75f6a503-d4b0-41d7-b7da-b3d63f84b8b2", "sighting--1035827c-66a5-4cc9-9fe2-747111ab6c12", "sighting--37a9fedf-8617-4702-a16b-dcc2a6c79950", "sighting--085ddeed-7ae1-400b-bc80-a426c461f59d", "sighting--c1b43a36-ef19-4a49-9ea2-ea74271ab231", "sighting--fb0991da-cfc4-40e6-9061-506ce21ed3ab", "sighting--210e4af5-b113-4d8f-af0b-1631f54db464", "sighting--38211507-5842-4ae1-b5a6-d33076821840", "sighting--c0b4c166-bacc-4cf6-ae82-3049dfaf1581", "sighting--f58640a5-062d-4019-b989-b1611ce7fc3c", "sighting--f15e7581-9cd4-4ad5-8cff-034c93a22f48", "sighting--4f570d0d-e1d0-4887-aeaa-8aa60977811d", "sighting--9e270896-c720-4c23-a9f5-b2a2cdd6a053", "sighting--5fc4e9be-fc37-4a85-a6b7-bd126bf248e5", "sighting--9ab29905-15d7-4ad2-a1e2-28d09f9b8938", "sighting--6093652c-7228-4872-b54a-caf8a9535a98", "sighting--ab85dddb-7d8f-4baf-b32d-b169c68536ac", "sighting--d54f4781-a9a7-4c4e-836d-5d1341cb1bc3", "sighting--daa1f88b-c4a1-4141-bcfa-43c106ed80ba", "sighting--72b7f439-f766-4954-b70b-43764abe7233", "sighting--a8ed0788-ab22-4ef6-9541-5f0c61daed64", "sighting--4aa5998e-eacf-4f6f-ac0b-e8d0e5eeed66", "sighting--3fc017d5-7f0c-4419-9e82-a7f86986aafd", "sighting--9f1139a6-2933-4745-ab99-294d8e33335c", "sighting--39b41001-adc1-4803-aceb-a22eadb2a400", "sighting--1dad0365-74e1-4fd3-a866-b4a9c4868de9", "sighting--4c7ea910-be76-46a3-ab3c-cd4298fe855f", "sighting--d071c922-0f2d-4fec-81ff-b0913bab867c", "sighting--9505fcf0-a5c4-45c1-a446-95ea80cb1f8e", "sighting--36a8e3f2-07a4-48c1-aeeb-f643e0f3cda7", "sighting--cb5cdfe3-3187-49a2-b45e-414cd287326f", "sighting--e16b1b24-3d6b-4511-8e84-adc8288fd285", "sighting--485ffbbf-3246-47e2-a35f-503bc04468e7", "sighting--497f8739-f8a8-4809-9a89-babbe0f72439", "sighting--6d0a8ab9-1d3e-4489-9e33-f6835f9b76ff", "sighting--c9d39afa-29c6-4836-bfbf-958cdc4ad3fe", "sighting--dc09d5f6-c365-4463-a348-8b8bda9a0128", "sighting--69a107fe-21fa-4d36-8ab6-03925abddb86", "sighting--a22eae79-5e28-4a58-bf7c-ac6dc1af9ac8", "sighting--cdb3b8ca-229e-42cf-86f0-1236bcd3d35e", "sighting--a257ead0-8997-481a-971d-f92324b75dee", "sighting--3c1e2490-b201-4647-895b-268c30c60c42", "sighting--bd57d6e6-7e02-42f0-932a-b59ee92360f3", "sighting--0e3b9514-6749-4cb3-ab93-167026ba0792", "sighting--75d38309-ca89-4c2a-9666-2a41ed55a0ff", "sighting--ac5984ae-e146-4e25-adc0-5b73ba6f9dbf", "sighting--c779783d-50eb-4c24-86bb-a4d4df776483", "sighting--a0beb59e-c327-4a78-9f26-9b27ef81571f", "sighting--c8581e4d-5fe7-4884-9d29-edd28b2ca623", "sighting--e08edf67-30b4-41f3-908a-0e0ebe326aad", "sighting--824d5ce8-3f8b-46c7-84e8-a1e7ac87d4c9", "sighting--b6050db1-55eb-4d03-a53f-fbf24545f7cd", "sighting--7a8ef48b-721b-46f5-b6bb-57fe27882a0d", "sighting--d7047d55-86fa-441d-90a5-609d62c4d763", "sighting--fa33e38a-09e6-4283-9902-a03e74f28658", "sighting--4a89547d-4c54-4e7f-8be7-a8a20d52825c", "sighting--9e8564fe-d971-4fc0-be43-93f594fffffa", "sighting--f5d6d7d0-7ce6-42ed-8e96-d6bd3b403b41", "sighting--1f9f1b34-8a7d-4523-92ee-b0f436496b82", "sighting--d72cde74-197e-4bc7-8180-6f1af353bc7c", "sighting--8ad67863-c053-4d58-a7da-450d8cc7ee6d", "sighting--222d5383-0bf5-4a8c-b4b0-3e8c373eac27", "sighting--6feab756-bd91-46ca-9f5c-4af41a9e4e8d", "sighting--dfb28c13-a58a-4947-affc-99657b6c69a6", "sighting--36009453-c2ee-4a69-99fd-06a16f6bd7a7", "sighting--6bb8813f-0f26-4c86-83e8-2585aae04cf3", "sighting--c9f2a040-fc1e-445f-b37c-2b6f8450cdea", "sighting--3051707b-1de8-4b29-b568-01f4ac8517cf", "sighting--3a2d1988-913a-4326-acc1-a73a5c9843ca", "sighting--8a213117-cfdc-4b5f-b299-6d2bf6f0706b", "sighting--0aebb27c-2f6b-47a1-9931-e459fb75911a", "sighting--c411697e-4cbd-40c0-93b3-234b7270873c", "sighting--e7ee16b7-b0a0-49fa-ae3b-2d4351f928c4", "sighting--4316aefd-7cd3-4554-8872-d3e70b3a4639", "sighting--ded9fc93-b492-4c50-a471-3d4114fa82d3", "sighting--bb7c1dbe-524e-4afb-a1c7-292dac27fb6d", "sighting--4b9ee2c9-5762-4c3d-8146-1cf8eb50f03d", "sighting--3b17a18e-db01-4032-adb7-d3c657e2d814", "sighting--e20234f9-3d3e-4eca-8c33-62cfc095a105", "sighting--84f9624a-833a-4a28-92db-a6ae82f9bece", "sighting--a65657be-0dca-4e96-badc-fcfb299be47e", "sighting--3fbda0ad-698b-4f22-afec-37dde8f36e74", "sighting--5162550d-0457-49c0-88f7-f46d027b054f", "sighting--13ea125a-d936-428c-aaf9-c5cccf55f54b", "sighting--0637f5a0-f477-4b1b-9082-57d0b7ab497c", "sighting--bc21994f-b60a-4487-a03c-a3d17cbcdfe6", "sighting--ab2faabe-146f-4c76-8ddd-303aceb080b6", "sighting--c8db09ae-503b-40b8-8179-91f57fa2a8a2", "sighting--6e4551a4-21ae-4813-acea-be4feeaf0806", "sighting--56cf1d7f-0ca0-4df3-96ae-c6fa4814c07e", "sighting--dbe50fc3-b853-44e9-a152-ad7d52a6c7ed", "sighting--61b82611-4c10-4afe-9c51-30a08ff19821", "sighting--1624ac62-0a89-4186-aba0-f21455617bb4", "sighting--3a5343a5-1c77-4ec5-a5fa-bf735c440e31", "sighting--5d3a1f16-f900-4185-a3b9-91ec4febe020", "sighting--e70fad0f-b320-4232-b2a9-3295dc2a0012", "sighting--254b0c22-0592-4ea5-b85d-d1720edbcf72", "sighting--49f83d8d-c454-4dec-890e-78508bcdc94e", "sighting--6dbd9310-3d82-4798-97cb-f719c0a7f456", "sighting--980ee439-cac1-41c6-8052-1e65b48703cf", "sighting--6f1092b6-9fa5-4909-9163-34571080a906", "sighting--22c8b122-0fdd-4834-905e-144b440f50dd", "sighting--3c02c3c3-b1e4-43da-a81c-57c47472c064", "sighting--9798a1bb-d071-4e75-9bbc-c46db0192484", "sighting--ba15b2b7-773b-4bf0-862d-d31663bae320", "sighting--809f3632-1d8c-4f8c-af7f-a9ebc5420fe7", "sighting--05d7e510-8b56-4c02-89d0-cbc8435bd93d", "sighting--b34fa84d-5313-410f-8f9e-d1f7177b34c2", "sighting--17056e3c-3e45-4962-85cf-6bf222e118d0", "sighting--eb5a4b89-ef8c-407c-b1f1-17ce1ac09fde", "sighting--764ed24d-2a08-4ea9-a54c-1d2ed5f16b58", "sighting--ae5c1a9d-a089-460c-a616-d3257e0990ce", "sighting--5060ec0f-8eb1-41bf-8e90-e987fc14d432", "sighting--d97d7f9c-51dd-4653-9bac-effadbcd0abf", "sighting--8cc0bcd8-58dd-460a-a215-414ff3508546", "sighting--60fb796b-58ff-4d26-9888-e1e0133aeb96", "sighting--2f40d47c-6454-4850-b28a-4127988640ef", "sighting--073dfa2f-98e1-4cd9-b1ed-b39ce3712d1e", "sighting--e92adf5a-1456-4a36-bf58-50d6eca79019", "sighting--971dafe6-a102-4e22-8d81-397349dea110", "sighting--907d2cfe-babe-40b0-a72b-9ae6d57be5ca", "sighting--360ccf07-6899-412d-95ed-5a64fb06d6d9", "sighting--4bd23310-cef2-4840-a44f-2396d2526afe", "sighting--d36fb29e-9cd0-4b09-ad1e-eaa7476eca5f", "sighting--08809d48-9580-4c8c-b8a3-821317a0578e", "sighting--7e22d8bd-f230-4d8b-a4e6-da87e2642958", "sighting--a352676e-e3ce-4fe2-b795-8b05444ec773", "sighting--21c11884-aa72-4995-b606-331ae01d19c1", "sighting--c80bb40a-3743-409a-9037-a05de568e331", "sighting--4e1d6629-19c2-4608-8434-c6e2e7a24d46", "sighting--19da5d7e-eef6-42b9-9797-4a8a6873f197", "sighting--e82a8a6d-42d3-464e-914e-46adda718189", "sighting--95c9c543-1e0d-464e-bdd1-fc48910193fd", "sighting--7a74cd54-ed21-4efd-82c1-2a745d420896", "sighting--bcc2ca42-564e-4ed1-9585-2c2fa1e0afe4", "sighting--d4a32c5f-8c0d-4f40-a4c4-16be27bc7fb5", "sighting--5ed50167-7269-45e7-aca0-51073b1b362d", "sighting--3e7dbe39-a37d-4160-91b2-18dafc8d109a", "sighting--5a7a6352-78ed-4b4d-8b11-b069621a0334", "sighting--fc45897b-8557-4273-9a6c-2038cfc3e243", "sighting--01700522-f567-49be-bed3-2eda2db195bc", "sighting--42c00f18-ac92-4f45-858f-9aa2e49719e5", "sighting--f464d03a-18df-4ff4-b88e-b29a97da999a", "sighting--54923a57-8617-42b0-9ceb-226d277ba12b", "sighting--99e7baf3-b382-4b02-b34b-f47a83a20dbe", "sighting--ffcbdb5c-32af-4d5a-b0c0-e935da81add6", "sighting--61722e4f-b4b6-45ff-8d58-072771e734a5", "sighting--8e521734-01e0-4e05-9c7f-549f028d30eb", "sighting--281da273-7d71-4feb-94c2-4fb68bb86c52", "sighting--04681d1c-11da-4702-a2fe-eba07c1dfa1d", "sighting--84087bbb-21c7-4389-84d1-758f5087927e", "sighting--cc0851f3-2004-4003-b575-c847ef060d3f", "sighting--28386cdf-2891-47fa-832f-e4bfc1003731", "sighting--a1fa013b-db5c-45af-a42c-5b3d15272c2f", "sighting--b02a74c8-7367-41ca-ab7a-4998bae84df2", "sighting--991f9ef4-b246-43d5-bb22-3670ddb770d8", "sighting--e27eec45-384c-4b71-8a5c-8a5c2fe1a63f", "sighting--6e1cb41b-e3ed-47e0-8a04-9a053b164d98", "sighting--b1389906-ff29-468f-a045-d825b1fe4a00", "sighting--46c425de-bdd9-42c9-a07f-68399099b820", "sighting--0a4a66e3-342b-4f52-8b7f-b3576fbeb4f1", "sighting--9e30aa59-ff63-4c72-96d5-cac092be1c62", "sighting--31af3a59-2155-4b62-bb12-4f8c6a2b160f", "sighting--5fde1ed7-1b8c-4fea-bfbe-78e7b2876fbb", "sighting--6529f332-bf18-4215-bebe-36add1f766f3", "sighting--bb6e6975-d079-48f6-bee3-31e4a75da9de", "sighting--cec673b8-2cb9-4737-a7a6-56b398e4c98b", "sighting--c2a06485-05be-4184-9e0f-ad352ebdfa20", "sighting--870de093-2b4e-4ea5-b47c-0bae54ac6c84", "sighting--6c8df63f-df86-40db-87f1-32ec15472826", "sighting--8498a17f-d17e-4df1-86b5-9395df1b0dc5", "sighting--923a1757-2646-4c33-b047-a0b62bf17359", "sighting--9f039448-61f8-40e9-96df-aa81ffe5e19f", "sighting--c3810d4c-0ef8-4da0-a6df-78e16d37253c", "sighting--f1e1a910-6ad7-47f3-9279-56b33105431e", "sighting--1d11ac13-3598-48d5-96f1-c9a6ed99b1f8", "sighting--8bf31e68-4853-41db-9d14-c0be4860af39", "sighting--99f7beca-c9ca-4dd6-87a9-aa6f8b80d9c6", "sighting--cbfb7e54-b3ea-4859-86f4-1dacf4bc0c0e", "sighting--f52437bf-967f-48c4-95e1-65d37d5d94aa", "sighting--3ad1746a-cde5-4c5f-8397-0b52730d0d93", "sighting--54a840b7-0e14-4071-80a6-3592019f0768", "sighting--d9ab1b11-b71b-4b0a-9d64-43fea8fb6ec5", "sighting--655f2b92-9cdb-428f-9e9d-dca576a9c0a3", "sighting--ba5bfe76-5afc-4e8f-a4b1-c9207abe9876", "sighting--96a7317e-9655-49e6-95eb-91b5ec36fb52", "sighting--7f9a849b-526b-46b9-87c2-658fd68046d6", "sighting--884be528-8919-454e-ba4b-ec9ea6aa8880", "sighting--6978cad1-73d2-4c05-b67f-a2ad01fe5ffa", "sighting--3dd792d8-4e9a-41fb-a5d4-7da921461708", "sighting--326ddf2d-83a3-453e-879d-abca47cac60d", "sighting--93753678-a798-4675-bf2a-78fb666e2601", "sighting--30d5b7a1-6090-413f-a03f-b889662e6532", "sighting--a50feddc-c7db-4492-9563-81e65127e412", "sighting--0bff9a59-ed26-490e-9959-bb5b00995fcc", "sighting--af779145-0efe-4145-a13d-acbc9ca02cac", "sighting--a56aeee3-68e0-4f58-b569-4330019bfd54", "sighting--878d7fae-e874-4d61-97ab-88090f881e46", "sighting--58741443-7d07-476b-8d1b-cc5e7299684d", "sighting--9820b6e7-7984-4906-b774-8409892eca1d", "sighting--08bda395-9d51-404b-b9ee-81ed1dba723f", "sighting--6c4a04fc-281f-49eb-939b-f8a6875ad83a", "sighting--9c39e9ea-bbdd-43d6-b279-bf9a35ed2df0", "sighting--a3d208ef-5ad1-4fd4-ad3f-b70cbbec2a91", "sighting--703cef31-cdf8-4f89-8845-b7fa475f5b2e", "sighting--e6f8660a-bf3f-4348-a3b9-5436b1d88286", "sighting--fa80292e-1f94-46e0-b5ab-f3ee19f6878f", "sighting--edc5b655-2a17-4052-b7c9-a8e5ee2d8907", "sighting--94cbe766-d7e8-41b7-9b0d-40991a1c2803", "sighting--914a1304-2fe0-4a8d-939f-4438d5877df5", "sighting--ec842092-323e-4b55-adc0-d7ae451cf998", "sighting--33a3a608-e3f6-4a4d-878b-4cf9e602bdce", "sighting--8d33c901-4146-4fe2-9e25-73c7f803fa97", "sighting--9a87396d-f9b8-4cf7-9204-9be13eb42b37", "sighting--4394c188-5e48-4365-a8ed-d3a36b9090ae", "sighting--820400e8-0315-4849-afbe-450b80028920", "sighting--d852ba39-b0dd-417c-aad6-548a07785e7d", "sighting--68956dd7-7631-49e8-a2b6-d4ca95617de6", "sighting--5c0233ba-6628-4fa9-ad81-4a89377e1929", "sighting--436c266f-5bce-4a8a-915f-77f9ff41ebdf", "sighting--121fdb06-6526-4944-bd00-9f0c59079bb8", "sighting--671ffb8b-bd95-4d43-9fdf-28bdeb336a54", "sighting--7df4b171-98a9-455c-bf0a-c3c013ab8719", "sighting--005a655a-72a3-4139-8ddb-ff5c1f9bbad5", "sighting--6ad9cd94-4f09-4684-975e-decefc8323c3", "sighting--cf1d1b32-2407-4162-86ce-e83080f8c091", "sighting--fd2ed961-e47b-47b4-bc28-f93eb42362b6", "sighting--aaaf6d20-78cb-4a11-886a-80124acd82b9", "sighting--e92a441e-f14a-4aa5-9722-27b34c166771", "sighting--376ccd1a-7f2b-445f-8935-9453006b1fd2", "sighting--7bfeebf7-a677-4a9c-be03-a6a654fcae77", "sighting--c5aa6c7d-37b9-4823-b911-c41ffbeb8f3a", "sighting--7c81a2f3-7422-44d3-b609-b87c6d456064", "sighting--86004256-4490-4cfc-8f12-fe312b5b395f", "sighting--4ecc76b5-bcc3-4469-b20a-cbaa1b53154f", "sighting--e9a11e27-d95f-45bc-843f-58c81eb76f84", "sighting--e1e0596a-61b1-4292-a5f0-4af735f8e0e0", "sighting--5a2b1869-55ac-4cbb-8eaa-f1ed1026388a", "sighting--cdff0923-fb90-4f44-9751-5f57d76510e1", "sighting--ae6cb1c6-d1bb-406b-b7ee-c1733c9a4deb", "sighting--d0b7e790-044a-4af0-a0a4-ed0cdfb1ab66", "sighting--06400718-0993-4555-8ce9-c489b3d58d31", "sighting--bcfab64a-d12b-440a-b1d5-c1dcf3a983ce", "sighting--3f8becad-94e4-4f2f-a13e-9d94d843daf5", "sighting--a3565ff2-6291-406c-9297-5a0e5ed1aab5", "sighting--1c0abfd3-bcee-4726-9537-7301e04c8824", "sighting--6945a752-6fcf-42ca-bd5d-eeff655e0a86", "sighting--e90b058e-ca3c-42c8-8444-c20f8b81ef25", "sighting--8f05bc22-24ae-45b2-91a0-fc5d56965edf", "sighting--44d69e4f-5292-4149-8e9f-59300f866081", "sighting--c76f8a24-54ca-44cd-9b1f-11169f029269", "sighting--8c9285c2-f0ed-4332-9584-aaa2a7ef68a6", "sighting--88b96747-5c22-41b1-b36f-29321021ddaf", "sighting--4fa8df61-d885-4f46-b729-773741e0712c", "sighting--3aba7f6b-4557-40cc-bf32-e494916d97e3", "sighting--b0c8e8ad-4bce-43f4-8929-295ef8280a88", "sighting--cdc97cbd-5d1a-4aef-ac01-8a84a58d3f44", "sighting--cbc30c08-f5f5-4de9-ac70-70dc5c8fddec", "sighting--2bbb448c-5939-4b17-b88f-e279c8150bb4", "sighting--294db553-dfac-4ccc-aa4f-aef3d303f580", "sighting--163f387a-e9fa-455d-a7da-83664ca81350", "sighting--fc1b63f4-d948-49d0-ae70-e114dc0cf47a", "sighting--267a6a24-cb84-4faf-bc16-75a71f16081f", "sighting--29a0076f-a1c5-4ef3-83bb-069df9720fc1", "sighting--b2fabefc-954d-4281-bdbb-166394bf405c", "sighting--663ece7a-91cf-4369-b2c8-bf7f0514a3b0", "sighting--c1002d2a-3e45-4a54-a64e-c53783bdb928", "sighting--701e6b7b-a641-4bf6-b013-583bd83978c7", "sighting--cdde5761-2370-474c-b980-44052dd0f9cc", "sighting--7a326b77-af52-4443-94e0-10414076728e", "sighting--e23f5129-50c1-4450-8e26-2128e5b50246", "sighting--0a8e01c6-7bf0-46f5-a25f-5d97d88985b2", "sighting--cc14587a-9767-4405-8664-5b600d7e1b03", "sighting--4eade12e-0c0c-4804-9d36-5cdf045c610b", "sighting--a28ff02b-f036-4ce8-b909-d43022829464", "sighting--1afc123a-2263-45d3-8f53-cb04d9213eca", "sighting--f753a6de-78c0-4988-b23a-d35fa256ab30", "sighting--8de9c94b-e916-4457-a4d8-31e8bb1ab4dc", "sighting--e2d8c652-158d-4797-9a97-b2db85963754", "sighting--1ebb1f5d-c94e-4d3a-b33e-feff88a37b96", "sighting--0aeedba2-48b2-438c-849e-970a201159e2", "sighting--b830e567-61dd-407c-80a8-2052ca6ee69d", "sighting--75ff0336-da54-4110-b9ab-c2053c4d1a3c", "sighting--efdeebe1-1035-45b5-b623-859d9188562c", "sighting--03c07996-012a-4bad-9bd5-a0c2e7a7dd82", "sighting--b7b2799b-e87d-4236-8b79-ffb0d4f657db", "sighting--17cb3cbc-2a69-418f-82bf-8f47aee8ce9f", "sighting--9fb5a4c7-670f-4472-b223-6a3255a96424", "sighting--adbed708-b970-438d-9e3b-717f5f1ac2d8", "sighting--043b757a-ca79-4d61-8976-81f5067afd15", "sighting--86306a73-93f3-4a70-bef4-b9f0649af641", "sighting--e575f500-a223-45ee-93b0-f1064fecff3d", "sighting--428c8d1c-7f3d-4508-8ff1-de8f4c3fdfa2", "sighting--c79e3a2a-045e-4d23-bd2d-42486446c738", "sighting--e5baff85-922d-4726-9b6a-38439cfc8361", "sighting--75ccab5d-b5cc-487c-a4fe-49ec0629eb11", "sighting--9781b8a5-ab2d-4b88-b12d-cc716371a0d2", "sighting--3b9a3307-9a96-454d-8d7b-2730620d257f", "sighting--e69ea415-cf31-408e-88e7-c0822ece683d", "sighting--44d173d1-448e-4970-a575-74ea74b62571", "sighting--88507094-acda-4dc0-a306-a1bf318f6499", "sighting--e4e53447-13d7-4ae0-a8b6-73c79fc5d5a2", "sighting--6b4b1716-e35b-47fd-9f3a-3b63ad3b7911", "sighting--240d4ca6-410d-41cf-bd34-58f1454e768e", "sighting--81f192be-04fa-48e7-9e30-8d76f45ebb44", "sighting--e47d56b4-b08e-46ae-84e1-c8d14776fb5d", "sighting--3842a9be-73a5-444f-ae35-114c5390b9a9", "sighting--5ef4c4db-7878-47ce-a9ce-f82cb4177110", "sighting--e3b3908e-36cf-4089-8048-99b11c64bc1d", "sighting--b5c8b7d2-a70d-49f9-8c45-ab060d939d8a", "sighting--e9617c1d-3fce-40d1-ba74-00e2379fd8a4", "sighting--65d9122f-4c3e-41bd-944f-b02ac4b4b782", "sighting--da334348-04e7-4473-9a92-69743b844f5a", "sighting--9ed05146-7a39-47ad-8ebb-5064ca96c01f", "sighting--ff4e0d82-43d3-408a-94f0-8c041753ca2f", "sighting--deab7936-65af-4b22-99e1-e3e1d9ee4904", "sighting--8c305c6b-2ac3-4a2d-a365-4a232438799c", "sighting--1c6a75e9-7794-4ec3-9758-293021458046", "sighting--53a5e905-accd-4cb1-a20b-2d97708a0b35", "sighting--840baf8f-f05d-461b-9c37-f07c8c5b3de8", "sighting--a4460b84-a7d0-47db-864d-98b66777242f", "sighting--f2818bb3-30e6-4a09-86d2-ae7c0f193311", "sighting--cd62dae9-449c-4359-bce8-0f8d1ad6b8fa", "sighting--8256b432-29c6-4231-8610-02c24a1c35f4", "sighting--7005a266-80aa-4ee9-abe8-cc16d646acee", "sighting--bbfdc611-f01c-4171-b548-68fe8318071b", "sighting--4ddb499e-eeb1-4720-9d15-9f404b04c356", "sighting--5c3d3624-940b-498b-87e9-e792b7d7eb28", "sighting--c304055e-960c-4fe9-9d5f-60269ec4b104", "sighting--e254e4f6-7a7c-489c-a8c7-9c464c720845", "sighting--8ffd1d3f-8a56-44bf-9acd-26f6acc2bcae", "sighting--26eeaed3-2af8-4199-b6a8-b32f53dd8d8a", "sighting--7adc4aae-faa0-4d4b-9352-534c3bc70f83", "sighting--45080865-3b23-4e58-a84b-0f9c12e4f76f", "sighting--22748853-4608-470e-9a23-76348450c6e6", "sighting--a8c5f45d-869b-47ef-8027-1055a198a0b8", "sighting--bde1e113-13b3-4a27-9987-3e22dec79928", "sighting--29726690-0995-44c5-b0d1-e52ca691e5c7", "sighting--aeb50bb7-9afe-4440-9d31-3e2a1b94a383", "sighting--4091d281-143b-4ab8-aecf-dba0ad2d1132", "sighting--86c00ed7-8b1c-4075-b407-daa6c115859d", "sighting--3276b9c4-08ae-4fea-b753-a9caf290add2", "sighting--a3808ae0-a0b8-4b7b-9dd9-2f68c121f159", "sighting--2ecccae4-be0f-4b76-b061-c8c113a0679f", "sighting--b282f504-4039-4dd0-818a-bea831574f58", "sighting--451a58f5-0759-4c8d-8708-d48d50b5c664", "sighting--8e209623-a897-48bc-89cb-1137d157e871", "sighting--4e5008dc-6fe0-4315-900c-04c1562e2a0a", "sighting--92fce6db-8130-4692-ae09-b491b5b95cc8", "sighting--1be5be3f-ecdd-493b-99e4-b3ce3b83e30d", "sighting--0db7ea9f-78c6-4199-9aeb-24bf4d2a572e", "sighting--6a89a0f6-e67e-4e07-a200-66915670483c", "sighting--64f0e4b5-af40-4b3b-82bc-44032488ba6f", "sighting--c8714963-f486-4f82-9e6d-85cd058880b1", "sighting--ba7e7901-ab83-47b5-a16d-45cabfecc1c2", "sighting--44acdd73-49d3-47f8-8c41-f51645c32ed0", "sighting--b01efda2-753a-4d56-9be7-9933f0e64938", "sighting--3ccce2b4-799a-49bc-b7e5-d9b21055158e", "sighting--e39351d6-78f0-4312-9d28-cebaa54641ea", "sighting--e10c1bed-0b7c-44ba-8572-800100c9d503", "sighting--a8e830da-467a-4c65-bbfd-babefb6d13b0", "sighting--c40c0348-7b13-414a-8868-91697f4fa5e3", "sighting--3f7b6d23-f2ea-49f3-ba34-d312dc31a99b", "sighting--2fd1e561-717a-4165-bcdd-1bffb23cde04", "sighting--2349cd49-e5c7-46ba-b51c-1b58b9cba25d", "sighting--ae4d7a64-9e62-4e7a-b2d4-20acfc7907c6", "sighting--cd61b773-1c99-44f0-8e90-bb26eb6d22cd", "sighting--ef567ac6-fe2b-4c11-aa21-22ddab17e246", "sighting--2e0b3b24-0db5-4b51-a5bb-2495e505b248", "sighting--771f1ceb-2ea1-46e2-8903-211a65920b80", "sighting--c6384d9b-ef90-473d-975a-f434e6b48b80", "sighting--52960f05-2424-4730-8301-4bfa4b42a056", "sighting--afffbc20-75ed-45e5-9c89-a6a69c39dc05", "sighting--a1b6f7c2-221f-431e-9fb2-85152a4f3502", "sighting--69de7a7e-9b8c-42ed-a685-31df3560b9eb", "sighting--259a5ce5-760c-4df4-9efb-4482288f99e4", "sighting--3f6ed33c-6b2d-47fa-8db3-1887009038c5", "sighting--7f03602f-e9ea-40fc-b290-2c23c06cd6fd", "sighting--a1dc62b6-742e-4f71-bdf4-1a5270ccd29d", "sighting--3df74245-ed27-4941-8e59-3e6e830bd9ea", "sighting--39177c4a-16a1-4a79-8b12-a54bc47bd1ca", "sighting--c6c8943a-2ba5-43a1-aa59-284722b150cf", "sighting--9158bcb1-1afb-4a72-92e4-42193d4d2200", "sighting--6c5ec931-07b7-4e9f-8e9b-6918132e36a9", "sighting--3aba1824-f146-4cbb-b22b-62754f3932d7", "sighting--11216b9a-8a18-4fbc-88a0-525a0ba13927", "sighting--3af22a3e-e654-4806-909c-1bcfa1aad099", "sighting--094db079-197b-40da-88b0-4c7ff160dc0d", "sighting--c9833eef-f15c-4b5a-80fb-af29f53bbbd8", "sighting--39ce1dd6-9089-4445-96d0-5e7a071e00f9", "sighting--c35a6cb6-f222-4404-9520-99bcda4fcd86", "sighting--51db2bb0-9e49-4d22-95d1-eb1a479e89a2", "sighting--09f9d5dd-3a75-40fc-ab3f-bc52c4b72583", "sighting--fe742b1e-9e83-4fa5-8e60-8eb74be37417", "sighting--9ee80180-1ff6-4ff5-8f44-9e434d9ca63e", "sighting--0418ebb0-0cde-4b0e-8906-579a7bdc85fe", "sighting--179731c0-0660-4ba7-aa9a-ef1e048ee216", "sighting--dafda297-5c9d-4540-8266-6c7f7de4f368", "sighting--fba6abd3-662d-4b2e-a5e2-4ae330975471", "sighting--0fcd4faa-70c2-4fcc-bab7-af8e1d4b7a6c", "sighting--0b9bb3d7-8e47-4f1e-b609-0e4838c592aa", "sighting--a62bfa26-7b16-4da3-ae94-f040ebfbb7be", "sighting--ee5a0544-c4c0-4016-805f-28e1672b9ee9", "sighting--b4b0ef0e-f118-45a5-99fe-1eaa72e4fa19", "sighting--f685ee15-0628-4043-81fc-f1392b5d05bc", "sighting--0b5bbe21-e820-4bab-bfff-d6737ff7a4fa", "sighting--27793b69-3abf-42a8-a50f-a5f7d5e0c130", "sighting--c8aa8c20-7b86-43c0-bc25-50129947bba3", "sighting--4224b6b3-1728-4eac-8064-d1e7b82b2c2f", "sighting--3857b133-cc0f-4911-8b29-6bc97266da6c", "sighting--6e59ba29-dd16-4b6a-ac12-d328cc1932a6", "sighting--69632304-9a74-4c68-b47f-db941f2c7c50", "sighting--fab83367-3cdc-44c3-8b16-11e4a4e39721", "sighting--99322593-a842-42cf-81de-bde69da5b54e", "sighting--7b43a243-48b2-4f8f-8441-ab0a74ad971d", "sighting--ab91374d-3c61-411d-a31a-abd311acf36c", "sighting--a55695b0-f2de-4705-a6aa-2bc27e7d974d", "sighting--a1f874a4-3854-4061-b288-6f4bf87bd37a", "sighting--60feed44-8587-4d4b-bd04-62dc6647e0c7", "sighting--48726cff-f1e7-48ca-9f14-91d00b565ddd", "sighting--1116ad4e-c9fd-414d-9993-72abdd440af3", "sighting--a53435dc-6954-4820-b57f-980a0d731dc6", "sighting--ce22cf0d-eaa5-41c6-b109-48dd7ad185d7", "sighting--2018bb05-7a96-4f99-bfce-af5b654291b1", "sighting--11e3b883-a19c-489c-8124-150883f2d634", "sighting--0d891f61-b423-4d33-b7f6-78b6133dfaa6", "sighting--fa0aba0f-d0fb-4d6b-9f5d-c9302e812d89", "sighting--af16b243-bbc1-4b3b-b2ab-b741e50eb524", "sighting--71abb783-7fce-463b-a3f5-a3fe85148863", "sighting--bfd2e952-6637-42de-bcb7-ae0987b02ac9", "sighting--4ce5808f-cc76-4fb1-904a-360bca8a9093", "sighting--e6b5c574-af05-41ef-a6cc-3c5f689d9fb1", "sighting--08790442-a69f-4792-a45b-30d1f7270e83", "sighting--166473cf-e8cb-4667-a4c2-c6bc9753d39e", "sighting--0a21dca8-44a2-4a6a-9da9-0c5baede55c2", "sighting--72cbc877-f775-436f-b1a3-748d6734d4d6", "sighting--762c8393-37b6-4d47-9c6d-16be77ac76b2", "sighting--a7ebde9f-42fc-4019-bd2e-5a81cd5c3efc", "sighting--4e3e6fe2-600b-4392-997b-98d64cff855b", "sighting--c7d15770-8879-4117-87f3-d3c95ebb7a97", "sighting--3dc017dc-9299-4f4f-b450-3e522938c081", "sighting--e60afeea-55ee-4ae0-a597-4763a36af701", "sighting--5ad2804c-bb63-4892-b48d-0dd8baec7aed", "sighting--c10b6a88-f9b3-4ab8-aa83-256babceac93", "sighting--0b6b7c99-4c58-4156-884a-7f50f2351828", "sighting--2543d97b-a387-4621-95f8-74092a261612", "sighting--2a14f53a-bb75-46b1-b4f1-92b2382d7ccf", "sighting--c0c090bb-4e9c-41f5-ad32-adab5f266f66", "sighting--2d65c735-a2f8-4168-9886-f48c4b3938db", "sighting--e0fa660b-2c9f-48ed-82bc-dc486ee374f8", "sighting--45e54b83-1abd-4e19-bad3-f54f238cf736", "sighting--6a8a8ac0-675e-4995-9ae8-5d4b167f548b", "sighting--13e05654-0111-4d79-b968-5829045de05b", "sighting--c390faae-a4fc-4390-aaf9-0bfdc5c34518", "sighting--fb82b8b9-1261-44a9-a8fc-326ef1af7357", "sighting--bf0e32db-f111-4ddd-837e-4b9970756403", "sighting--3abbc865-d012-482a-b50d-163eef0f2bbb", "sighting--74263d8f-9db3-49ff-8805-815c22a7b8ad", "sighting--4b34d858-43cf-4cc6-9dde-94089ca71376", "sighting--e89def5f-f1f5-4719-9458-c50a6fa3494f", "sighting--b580c896-f560-4818-91af-c782d248a83a", "sighting--d07c374b-205a-43b9-831b-202e4e67c8a4", "sighting--61feda91-5f83-41cd-801b-6bb927467fff", "sighting--546abc30-487c-41b7-a670-0c7e82f5a03c", "sighting--d9caba61-c21a-44fb-9bf9-b5c42ac44acf", "sighting--614b1d6b-b314-4087-a5bc-2103df74fc84", "sighting--5e61a411-5b2e-49f7-b70b-abbc5976931b", "sighting--90040b89-ce5d-4518-9798-9a9e9de7ff8b", "sighting--a6d8999d-1856-4d5a-9e91-fba8c6246572", "sighting--fbb82c36-8cd5-4b23-a839-6963444fc8d7", "sighting--c9cf9fdb-0aac-403e-b767-82b2141b287f", "sighting--27cf7ace-29a6-4044-a0ae-b224dd5c3763", "sighting--46c15239-b2a7-4a1c-8598-9253ec84aa22", "sighting--424dbf96-4fa5-4922-8779-2cb9c221b088", "sighting--ed2706fc-49f7-4fa6-b6d4-9f3af797c54a", "sighting--f4d7c481-4330-482d-9aeb-a27bbea76e98", "sighting--f0d131e9-27a2-41d7-8cd3-f414d7cd0679", "sighting--6b5839c8-75e7-4cac-bc5c-2f56483bf9ee", "sighting--985dd7ce-bd4e-49b2-9d28-70d36de57c45", "sighting--2fc608c1-8b6b-492a-aef6-c2759bc69222", "sighting--d4106d96-350b-4d80-bf73-d10c7d63ece7", "sighting--36f63ee7-795d-4339-96d6-232b830984e4", "sighting--5e990777-5355-4476-a72b-1b5b5a33ffea", "sighting--a25d98a7-afce-49e2-91f3-469bcf216ca2", "sighting--61520893-6b09-4797-9bf0-22b363288f89", "sighting--2cbd0635-85ca-4338-9a4e-646d5f4be465", "sighting--0ca6d4b7-d8f5-4199-b712-03ae28c52982", "sighting--90e6c30c-6194-44a5-8370-7dd21fab4c77", "sighting--d8e526fe-85cb-4674-9f86-d55a997e27b5", "sighting--dab00f2e-d04b-4d85-8874-055032271fdf", "sighting--765bb892-ffb8-4a50-bbde-ece5c31be863", "sighting--de59a025-42dd-420b-a116-45aade4519a8", "sighting--6e4c973d-f866-4dce-b630-718d101e6aa2", "sighting--54f3f0b5-5c96-4bbc-8544-f14eb8a5f2f8", "sighting--fbe55c86-3436-4ad0-8117-5c2fcb2520a6", "sighting--e30c1591-880e-4adb-ae71-dd2fe17beb17", "sighting--6a11d73e-3359-4f81-a076-1270b1052e65", "sighting--9c362f00-3b31-4c9d-b196-8dedb3d551a5", "sighting--b61cff42-e146-46ef-a054-f91523831755", "sighting--0a350cb9-e33b-403b-835b-7714db20d38b", "sighting--feaaba12-e320-4aed-8550-4579d2531a54", "sighting--8d7cb1e9-82c0-43cb-bc6a-32cf4bdd3388", "sighting--611f2a9a-6138-4e8c-a04e-3db7a8ddf710", "sighting--c385c1a7-9300-471b-beec-14be0e65b204", "sighting--662f49b7-badc-4571-af9e-df979de812ff", "sighting--06a11958-6a1a-4f82-bf94-24cac9dfcda6", "sighting--6f041d49-c7dc-4c92-bafd-4aef8f179be0", "sighting--3a0ca9bb-1d2b-4c17-90c3-444a24136304", "sighting--17beb8ba-eaa5-4dab-a293-46c9fbab42aa", "sighting--58932d70-1d68-489f-a5e4-1c62d74b495d", "sighting--c30e018d-e150-416f-9514-ee16a946deb9", "sighting--9774731f-6d0b-421f-bb73-1c2b648084bf", "sighting--1f9fe119-71ef-403e-a009-86ed745c2dd8", "sighting--d1cecf62-d7bc-4851-ac3f-d48a97188b69", "sighting--b1cf8585-9ad6-4451-a677-8dbf44149e38", "sighting--f6213a16-868b-4d96-bae2-e1de4c372ead", "sighting--6d94f217-ec17-4874-ab56-808181ca0849", "sighting--50e8a168-fb05-46ec-9bf7-372581cb161e", "sighting--2ee739a7-7dc6-49ae-ab9a-1e7640f36d01", "sighting--b0d6a300-2f03-4e56-9409-0a27514227a4", "sighting--1024057c-2f12-44bf-80eb-8940d878ca77", "sighting--9ff23472-db53-421b-97b1-bb8281a563c9", "sighting--54a9db29-6c50-4aa3-bcd0-5276d9f71df2", "sighting--617b4905-6081-4f26-8e80-eb7024006ceb", "sighting--a45e358f-4a8e-489f-833c-169b457eaccf", "sighting--475a40f2-38ef-4ca4-bffb-a749ed6723ef", "sighting--8fd11c05-347f-441d-b7fd-61c235825824", "sighting--8d10b712-975f-4ae9-a51c-a203bb773c7f", "sighting--aca0e88e-00d7-4437-ab98-bad24d3fbadf", "sighting--a2fdb63f-e2cb-45ab-8fcf-271f50e06d4a", "sighting--ef2ef7b8-b845-490e-a9cd-6fb1a380c0e9", "sighting--4fdeab41-63f2-4314-80ad-bf4c226b29ef", "sighting--aeeeff53-3242-487f-a51d-1d9ef081703f", "sighting--03a1b8ff-954c-47b5-a72c-df4f892f9314", "sighting--b2518992-2a07-46d3-9bc8-c10c47cad548", "sighting--1a43e5f1-c0c1-494c-9c75-a90656834a52", "sighting--2876c3a8-79aa-4ddc-b3d9-1291a2af98a3", "sighting--4703ba1d-81bd-4f9b-b44f-94a685633cce", "sighting--888ec031-8857-4983-a7cf-d73fde9a7790", "sighting--fefe79ef-395e-4174-aec2-89062316cc47", "sighting--b718da94-2f28-4d30-aac3-1dbfe8944870", "sighting--be898e7d-9587-47ce-b3e6-6d9029ab1703", "sighting--a8d48afb-97d2-4a0f-86dd-0e5023d001dc", "sighting--601418cb-9967-4db8-b290-c839a9963b1b", "sighting--52ad2929-9761-4530-a80d-e53a7062fbbe", "sighting--06e962b1-8987-407e-b1e6-0ad648499d23", "sighting--bbaa6d3b-4e2a-490d-aa16-5b019bf8a249", "sighting--1d21f764-4076-4021-af49-724e9cd65435", "sighting--5b298450-dd11-4d3b-94ed-44714c19f4b6", "sighting--557eff0c-171c-481f-ad4d-4c03fd2f4226", "sighting--76e216aa-4a69-4b42-961c-ca0657341d76", "sighting--83c5b9b1-e9cd-49bb-82a0-002eddd8733c", "sighting--3fdd017a-7ece-446e-bb37-3ac5d4fb8cfb", "sighting--8e01c3b0-8703-43f7-a152-a8bda4602734", "sighting--7ff348dd-a440-4599-a2f6-b4e1cf0aee3e", "sighting--ebff1a0f-9815-41b8-b2a3-f769796479b3", "sighting--fb8feaee-41a4-4977-8025-edc68ade5c57", "sighting--e080b4e7-308e-4173-bf95-9d59ceb6790f", "sighting--8ea50f57-b3f4-4c7d-b007-6b538d5b707a", "sighting--e545deba-ecd1-40f5-a722-d2f11e377ebd", "sighting--7445f20c-981d-4b65-a33f-273e770f9700", "sighting--6d7939d6-62f3-48c9-94a7-b487422515e2", "sighting--2b178c75-2dc8-4e3c-af57-d33df6b94c42", "sighting--5f52e0b5-a45d-4cd7-8b7f-005dbb7c54d4", "sighting--4582fd6d-09c9-40cf-8e12-9dd5c27848c1", "sighting--5e480b38-db3b-49fc-914a-c9abfb78dd00", "sighting--5848933e-9dc2-4e1e-b689-7edb335edd9a", "sighting--47f022a7-1c97-47bc-a55c-f74a87f12b32", "sighting--b9573826-09e0-49da-9af8-72623a9eb81c", "sighting--01c9f112-a021-4856-9ec9-e24a71832cf5", "sighting--691025eb-2520-4088-bc35-ccafcbde5071", "sighting--9d24aa0a-477d-488b-afc3-de8840cd890d", "sighting--36082177-1821-4559-a6c8-ab0950c539e4", "sighting--693b3550-7d95-478f-836a-4828591fd6ca", "sighting--8fb3a82f-6585-4c04-8bed-f94fd1c01e3b", "sighting--29090e0a-4d94-4f7b-b5ff-c47dacb707f1", "sighting--1366c05c-ff59-4e8e-b7c8-a40d6055a6e0", "sighting--8bf9dc52-f5d8-49a1-8e0a-21110a83841e", "sighting--817ce762-b66a-41b6-a59c-7e60ecd6b970", "sighting--95152f98-8d91-4656-ab8e-c84d65aa62a0", "sighting--4e5ebeb3-77f0-4c00-91be-5efeb32eceb8", "sighting--fe71b01a-f7cb-4130-afb4-3a9488df0882", "sighting--631d9373-fe1a-47ae-80ad-496b884894c5", "sighting--4f2f7756-3a7b-4894-8cca-90d9837cfcb5", "sighting--36aac67c-8178-417a-bd09-e6df969eb5ec", "sighting--5fb18d49-feea-4e29-a5b8-e85c3bf907c0", "sighting--42fa6c59-3d6f-4522-9cfc-f1700ba67987", "sighting--3d30d0b7-31b6-4352-b932-fd9811cb9069", "sighting--7d6b0afc-26c6-4d06-9ca4-f6631507e4f9", "sighting--ef53680b-d466-439d-aaa0-7e16e01a2459", "sighting--b6a3babe-06ea-41b3-be94-126cb31b5f04", "sighting--c401f18c-0b79-4651-ba7e-d8aae6738d06", "sighting--5f1cd431-9ced-44a8-a20f-ce9761a680d7", "sighting--f6e44f47-fb04-46b9-ba4c-e823457519d1", "sighting--ba68ba6b-63ca-4adb-ae36-17831cebe4f3", "sighting--d1139e11-9a3b-48a2-8be5-0e6beacf0f9f", "sighting--80412aef-98e8-4bac-bb09-660618272e60", "sighting--5b9df279-756f-40d4-8c56-f21a9c2182c8", "sighting--eab3300a-a37a-4429-afa1-7000786ee8f2", "sighting--9a46fa31-cc87-4e5c-b559-67be4362cf96", "sighting--26bb965c-980d-4591-941a-73cbc9ffb7f5", "sighting--a5e4104e-79b2-4952-a73d-2c010f634d81", "sighting--9579932e-c192-4ff7-b94c-f83071ad9784", "sighting--b41cd6f8-a39f-4cf9-9868-2b1284265e19", "sighting--c545764d-06cb-4e83-ae97-5b6134fc4968", "sighting--3eb46026-c239-470e-aa8a-cb008d1e3998", "sighting--1834d230-58ac-4964-a4e5-a90adcfac163", "sighting--8da9c847-5698-4dc7-8af3-939c012cc137", "sighting--d95e9875-3b60-4307-940e-db608823a7c4", "sighting--58a4f3e7-fbe7-4ffb-bc39-7eb374d6a3e4", "sighting--695222d8-428e-4bcf-9ba8-169c80b06a62", "sighting--8ea81e6c-8a95-4778-8747-558c080962ad", "sighting--9c5f67f9-f82d-4feb-aeee-ae52b5a2473e", "sighting--89f8745b-6954-486c-bb77-3ad57be1e5e7", "sighting--66582794-1854-4d32-9eaa-81f4665cde6b", "sighting--4d54e808-4136-477f-b745-3ab9fceea76b", "sighting--46658929-d06f-4cbc-9cc6-e922f089dbc3", "sighting--e136d475-bc3b-4240-9bc3-b33e1a1ccf0d", "sighting--6dac72de-28b4-46c2-8f08-d962a8ed0551", "sighting--4325c42e-a686-4e00-b0d4-d2884e3963bf", "sighting--bef3ead6-244c-443f-803e-59326a81c0fa", "sighting--7d08eb31-7c80-41df-b6b7-d68cad9392c0", "sighting--4680c0e0-0362-4eb9-b616-8ecec141a1c2", "sighting--dfc54e3a-a2ac-4b78-8941-2cdf814f804b", "sighting--f0fb14bf-939f-41bd-93aa-22e62f32953a", "sighting--fa0f399c-1a34-4cb9-98c2-078a8badfab2", "sighting--52bdc931-eede-41c7-b01f-ddf7c142eec9", "sighting--a876af7c-f0e7-48f0-902b-c6b922c75574", "sighting--5d3192ee-bf33-4d7c-b351-028d973de738", "sighting--7016112d-7340-429f-b34b-4f1dfabce656", "sighting--fdea26b3-0de3-421e-be81-db769347adf3", "sighting--4a4abf3b-b31a-4d96-9359-36def5834e71", "sighting--18f9fc60-d98d-40e0-9d02-513b0abc6172", "sighting--0b33cebc-ed25-4bac-8041-bd002afde70a", "sighting--80a2d688-fe78-4561-9c97-cdf3ff1318e8", "sighting--9570a5da-9d19-4aff-979f-2cdd49dbedb1", "sighting--6045d35d-7a67-4f7b-b2b9-7d17b134f0ff", "sighting--3d9a8e6e-3b34-4b1c-9a40-fb66012fe55d", "sighting--30016d7a-1cb0-4b10-a75c-b0062f44603e", "sighting--2f4f98b5-46eb-4932-aec3-f06f6577d71a", "sighting--574ff738-da63-4df3-bb6a-f98b0d540087", "sighting--49840dd3-b905-4664-9353-9d70cbae1fd2", "sighting--f7b64dfd-6060-475e-97cb-8b674729f814", "sighting--695705e0-7553-4e59-9b3e-cf5f36692b18", "sighting--9004151f-e013-4023-8f79-8ad345b89c1f", "sighting--87d50847-5cb0-4c26-9c91-4245d2310ec3", "sighting--586be672-cbde-4f37-9d57-c729e7105466", "sighting--72e4c112-059a-4636-ad91-944d5b6c0a80", "sighting--624ec13f-b144-4426-9a8f-98d64b81d467", "sighting--e62ad680-cafb-46d0-9083-68c00d59499e", "sighting--7daedbe3-0f69-42dd-84c2-0952486d90e8", "sighting--cc7e6f3b-6db7-4730-b07d-c51cb6bca0cb", "sighting--ec93107c-97f4-46b5-9f5b-75c9a221765f", "sighting--bd1ed1fb-38d6-4735-a8db-6e989db2a77c", "sighting--39bfccfa-9b1c-4863-99c0-480881e42b09", "sighting--bd8a5822-08a0-4ca6-9070-f2be42ccd2de", "sighting--2350f4df-382f-4d50-a398-011f222ffea0", "sighting--0beb2748-ed82-4099-902d-1ae70cf1bb3f", "sighting--3c63d636-fada-4d51-b1c9-5b9f0d6b5802", "sighting--a5734e4c-9c7e-4137-acc6-fd86be5336e2", "sighting--34a114e6-fef5-4fb7-b9e5-a123a07b6873", "sighting--e565503e-14cf-4acf-8977-006bd63fd520", "sighting--6ebcffc9-a350-407d-85ef-5884d757f030", "sighting--f7156743-0ec2-4968-8264-9121ef2c20c2", "sighting--1baaa485-b675-4a1a-aa44-95f313a2d946", "sighting--ef3b5657-83a0-46c9-aa53-c0b67d653069", "sighting--92a3e1b8-5470-4e91-aa9d-7d3f0d20f9f1", "sighting--6452c83d-ceae-4d8c-9877-7267f8652916", "sighting--a3ad8ea4-c2e4-4e1f-8003-155211c5b601", "sighting--540cdfdd-f733-4535-8f80-27be50398a4a", "sighting--69550249-119c-419a-9db5-531e7fa194b6", "sighting--eb9ddce0-642d-4a2d-9d4f-ac574ce4990b", "sighting--490f4c05-702a-4d4d-86e2-9de8e03939db", "sighting--cd1d5f2c-1ffe-4354-a853-fe398cb73db3", "sighting--910e51ea-2ebe-4404-86a1-1fc316727164", "sighting--0dd407cc-539b-4925-a389-a3e6aa26ecf7", "sighting--c05ec119-2743-464c-8bb7-2a5457756e1a", "sighting--bbe102d2-04af-4ac6-9b0d-cbe328e3137a", "sighting--abeabcae-704d-456d-8846-4eec96406c39", "sighting--f283c6d2-a47d-46b7-938b-10019dab62f6", "sighting--14ef4993-816c-4252-b59e-481cd8eeb650", "sighting--8c4f39cc-9b57-469f-b0ce-0e6c0ee3b008", "sighting--d17f6759-fcf7-4613-90ad-c68c16ffb987", "sighting--5ad8638c-7fd3-4715-bb06-39378be8939e", "sighting--cc2342fe-4351-4fcc-a1a5-bf404d709702", "sighting--c3f4c84d-e9a7-4ac7-aa92-ff675e55b3e6", "sighting--bdb46652-019c-43b3-bb55-feba2fa739d5", "sighting--56a23752-7fb2-478e-a4df-3b627cb8aff9", "sighting--fbb33d0d-2505-44bd-8e21-a155d1d8fac6", "sighting--c02fc658-bd51-44ac-b352-385d7136908c", "sighting--7f02edb7-d995-4e27-a9fa-1b2fdde7689f", "sighting--89f0fe2e-a48c-4fca-9920-ab36bdd11683", "sighting--ffa34ed6-7467-4bd1-848a-f3e31e20a1aa", "sighting--6fd4d423-60c6-4103-b779-691e596c2cb9", "sighting--7213da43-de2a-46cf-be6d-58d7a0665f32", "sighting--0d0d0ed7-ca1b-4ba6-a875-32ce4a11028f", "sighting--2590eee2-6c8a-4622-a584-5424700bd03e", "sighting--1e699401-2c63-49be-a5f2-e33e314afda8", "sighting--0946986f-1517-4d7d-b12b-18a95f8d7fb4", "sighting--97124e0c-f590-4295-a4f2-d9a92ffa860e", "sighting--6735144b-f070-4a28-8b51-ad7b4ecf989a", "sighting--2abee6eb-8046-451e-bc54-05ba05850e6b", "sighting--65e37d77-6e53-4a83-a3b5-82cb02d66e66", "sighting--666b7107-83f2-44ec-814c-7c685b45de1c", "sighting--666b5104-60c4-4d64-90bb-4cf004eaf29e", "sighting--4532e641-7cb6-42ac-bf13-35b5ce74660c", "sighting--8c44f6e2-548f-4cac-a7af-516010dd1626", "sighting--f0f9fa6b-bb9a-4c24-9cf3-e83b2a6f0443", "sighting--1f6adedd-1b63-493e-b34a-29e5152b0ac2", "sighting--3c44ae50-00a7-41bd-b0f5-7cf479690298", "sighting--6590977b-7a92-43e5-843d-bd0cb6a479a8", "sighting--d7be2562-757e-456c-bcec-e7afa62f40ef", "sighting--203f98b7-6a35-44f9-a732-c5d396d277a1", "sighting--e05dbe14-113e-4b91-aaac-721b78faf5bc", "sighting--d930e8fc-6617-443a-b43f-b97be48dc39c", "sighting--a752a09d-14cc-4dfd-8e78-7baae8bb3e87", "sighting--0671c9f4-fcdd-47c2-9b94-98deb2de2484", "sighting--3ed20a79-e9c0-4954-acf3-1a6c6e087c9d", "sighting--afd9b0d2-bd0b-4556-aa94-fa09c8d77d48", "sighting--c248a98f-9261-46e4-a6c0-85e43ea52317", "sighting--1e74fd55-9517-47d0-ab72-63b70de2b2ca", "sighting--25d4c33f-084c-4dce-9188-aa9eb11f5b0b", "sighting--4823f5c5-f579-493f-b72b-713952699c9a", "sighting--38e57ca4-5615-4425-8caf-9901a716073d", "sighting--c73832ea-e88a-42fa-9d31-a54bf47fbf6b", "sighting--807ac8cd-0a5f-4ea6-8a7c-e3b57f8773ed", "sighting--521362fe-8306-4ff4-8e65-02b85300a57a", "sighting--b943f01c-29d7-408e-be9a-78e5967d7e6a", "sighting--0f991e0b-ca7a-4da1-b467-04803f4b2c1b", "sighting--34e07d79-4d59-4566-8d12-4dc8e458a395", "sighting--95f108aa-0188-4393-881e-240965686251", "sighting--ad4bc3d3-994f-48ef-9490-6603627d8e84", "sighting--851e7f15-6b37-439a-ba0f-46115d3f15fc", "sighting--f4c11e45-4609-4cba-a1e1-c6a66cec288a", "sighting--a929791c-0314-4cd6-88e4-f17794b79869", "sighting--d3555ad3-cb6a-43c6-8255-adac94b096a5", "sighting--1a56cbb3-f514-4d1b-a438-224a5062d59c", "sighting--5114248a-1619-4bf1-b4f7-c46fbde048bf", "sighting--ebb6056e-2a2b-4158-a22f-438ecd827b16", "sighting--449d5a33-cf37-4b6f-a8ad-ad036d703791", "sighting--b6b6d8eb-e8c8-4ca7-b9b5-eb50bc9356d4", "sighting--db47797e-be3f-463f-8350-9940a9700cd6", "sighting--e3b63a95-66f8-4cc3-8493-f5f27603aa0c", "sighting--e9dd1f31-60c7-4a8b-ba0b-a96d50c03968", "sighting--1f980ef9-876c-4b38-ac30-eeb75ea5279f", "sighting--368cd844-02db-4b35-9811-4cd12b210fdf", "sighting--19fe768e-8290-4721-b332-2eb4ccd6f716", "sighting--fd542a14-0d52-42a2-8750-07ea1df8bb30", "sighting--5b984ffd-75b6-4658-8c86-f7172992dcbb", "sighting--97175638-1d6b-4fd0-93f3-620d3d2263a7", "sighting--10f63017-5a1d-480b-93c9-053b864bcf91", "sighting--7b06c7d6-130d-41f4-a187-1cf0c601af47", "sighting--205ff3b7-14d3-4176-835b-b5a826c2c921", "sighting--e82a55c8-0b26-464f-afe1-9e4a81bfa9ce", "sighting--cbe742d0-3f41-4b0e-a8fe-47f17d8493f9", "sighting--d474db8c-5d4e-4453-b0ba-79a7b2695e1d", "sighting--43c4b0fc-0bad-49c1-9c65-8a394f5ce86e", "sighting--24fda793-8634-4f0a-93e9-4d5c1415bde0", "sighting--c396d473-5dbe-4782-a758-76cbc719ab7d", "sighting--b0947782-0aed-41ad-a0d9-8e6b755584ae", "sighting--54fb7bb9-cbe4-4977-b1f2-4b455a731004", "sighting--c0e114a2-90fb-4060-9b46-8231528717fa", "sighting--84d5b866-eeea-468e-8805-7bce296d7303", "sighting--dfe5989a-e790-4487-b3f1-3bd8f3d2f0f9", "sighting--3ccdeb1b-0416-42fc-b66a-4dea22462b0a", "sighting--6099ffc6-276b-4792-9168-8a69fe64fd65", "sighting--1a6c9754-a67e-4ab1-9039-bc302e5f46dc", "sighting--3c87dc97-391b-40fd-92b4-aabdc1384f87", "sighting--fa62ffdd-578e-4d25-9982-cdf1e6d36c7e", "sighting--4641c2bf-cda1-4949-8962-4589244d6f04", "sighting--3cd30a2e-3c17-415b-a60d-afd037964de1", "sighting--b63b099e-0e6c-4e8e-b40e-d828583046b7", "sighting--7c886745-8103-4414-bce1-441b82842690", "sighting--20b74dd5-6a74-4997-9a64-fe2fa23ce9ba", "sighting--520c0926-d0ba-4a30-97ce-434f4f55d711", "sighting--7815f6dd-cbf1-4128-a865-a655f1c7e20b", "sighting--8faf79a4-b74c-4486-b74d-258640a4d33f", "sighting--e9cd50fc-da72-4e93-ac0e-d39321aaa613", "sighting--9041fc51-36cf-43d2-bfd7-886fb7d8dd75", "sighting--42c5742b-5229-40a1-8d70-02299707a5c8", "sighting--4d082062-e2b6-4a33-b6aa-5c21d6d9b82c", "sighting--dd829635-31dd-4f47-a1ff-7f04f15421d0", "sighting--dbff00b7-502a-4155-b93e-5c7ad368ec64", "sighting--624f88a2-91ee-4f60-8119-ace5c18b7534", "sighting--30a74f1a-03e7-4fb3-ae7a-1e1dc0d9b970", "sighting--30f23920-7672-4ead-a843-f297331dc401", "sighting--b3281927-ac5f-496c-b50e-78c545f9a42c", "sighting--587f407f-4c5c-4e46-92cf-8d6c9194d834", "sighting--90b9df22-f013-4157-a84a-3e16436d408b", "sighting--2f15c649-a699-4e37-b318-d858ccda31e6", "sighting--b449afd1-315a-48ef-9950-d47efb4bf7d2", "sighting--409617af-9f0b-4d69-b5be-b1e25bfb2418", "sighting--fdbb42ac-1965-4502-816b-39eb26960188", "sighting--ff0a78a6-14f9-4b8d-9b97-7f2ed4bec8fa", "sighting--564cd9cc-81fe-495b-8d71-4799ade71a26", "sighting--00f910e0-8c25-4c1d-99f2-7837009a4677", "sighting--54573d8b-5df8-4229-900d-47949429632c", "sighting--4cd67201-b215-41b8-a994-1526af41ddc9", "sighting--944e3994-772c-46a5-bae9-3a76e7ec1a1f", "sighting--3cdf4596-8a66-49b0-a6f7-61a8003b12cd", "sighting--6102c5da-e33a-44f6-8acd-20a72c2c1cf6", "sighting--3ce53155-41f6-4574-8657-08d3381197bc", "sighting--5bc56bf6-01d0-4f26-bc36-ff2e4174badd", "sighting--e0079a43-5e0e-43a8-b23a-62e12ce0fa3f", "sighting--1d99722a-2779-41b1-b928-072621ed23e1", "sighting--cda438b0-329b-480c-b871-26e19ead4671", "sighting--11b9984e-0d35-4215-b169-0fda939d68f5", "sighting--099d1a56-4f52-47e6-b4ca-3bc477c768ee", "sighting--c4ff10e9-628c-4161-9a94-c80945132196", "sighting--7bf94a07-d430-4836-9995-edc95ae63068", "sighting--2d54876d-cc7e-4045-bc01-4a5f3eda1538", "sighting--f31f0541-d54d-4cda-80c4-6d665c1b1e71", "sighting--9638b194-158b-45b1-9bf3-ea7ee1c0dcbc", "sighting--c09ad573-0b4c-49ac-812d-392e24b14386", "sighting--f59c13c4-cc5d-431f-8531-b59894f1ee07", "sighting--ae724c59-12b3-4074-8d65-71d3ea2a584d", "sighting--fba15b4c-8327-4701-81b4-78aab2e64efd", "sighting--c9f1fc00-6ba0-4a03-a9f5-6164d61d6508", "sighting--39230e66-7e1e-44d8-bd45-9ab4f7e2a272", "sighting--87f30fe3-0750-4bdd-a0f6-895d54d6a219", "sighting--cc91e726-a953-427c-b6ca-be211212b81c", "sighting--51cb26bc-18c5-45b0-8469-1fbdeb8dd08f", "sighting--30ce8b42-cf3e-4a18-b030-04bd57515f38", "sighting--7f5695a0-1baf-4ef7-ae18-5604c9f005d4", "sighting--a1c96f5e-95a1-4e2b-8a6c-7e55e8c9606f", "sighting--0b3253fd-c3ec-4acc-98c2-b1fd3d6204a1", "sighting--b682f350-3901-44ed-91ae-abf77fb18a3d", "sighting--7537514e-6061-4320-a0f5-2d6daeec074f", "sighting--96d91a90-ccd4-4ccd-9adc-77049858994a", "sighting--391fe184-7c9d-4e1e-879e-329879467bec", "sighting--84c7d7c9-550c-4eb3-83d2-a2743d7449dd", "sighting--07db8473-c6f7-4431-81c4-2ebc46a31809", "sighting--6671d917-2b74-48aa-8b24-4ea837d36ef1", "sighting--360a4828-1bf3-44bc-b0a0-242b3996e33f", "sighting--2b8594a4-bea8-45ab-a2e0-2bdc10724733", "sighting--bbdb1818-7724-4770-ac8f-7fc823d0ebaf", "sighting--f3495605-fd04-4cb3-8a2e-4643212c3947", "sighting--647d778a-be49-4d46-831d-1a30d36c43a7", "sighting--595287a6-72d9-4a20-88d9-112e0e3d83f2", "sighting--e4ca6dab-b942-4846-a234-f937b79bbbe9", "sighting--6eae2815-1ccc-472c-ac95-7c009f288ffe", "sighting--3e42bb87-3c87-4620-b882-3b378d58bc76", "sighting--8dd7531a-4bde-4ee3-b975-55c27283fc7f", "sighting--d893b403-42c0-4d72-ad1d-c87528d457fc", "sighting--e4f35965-bbb6-40a6-b2b6-f9ff62f1b449", "sighting--a9c9ade3-844b-497f-b271-cbfb3aa7a807", "sighting--ec01f8f2-8f56-4fed-af2d-72bda580b435", "sighting--7f01e29b-3dc4-40dc-ad93-480f535a3ada", "sighting--be7c1bf2-082e-4b8b-b033-bc21ea2fb85a", "sighting--969f5e9e-68c8-4ff3-a166-d5ba952e49b6", "sighting--f90120cd-d8e0-4d9c-ae52-c5b7bd6f6791", "sighting--41ee7e6a-d9f0-472d-aca9-4362a9ca8ddc", "sighting--086af7cd-8bf6-4463-817d-99a38750c15b", "sighting--5c9ca2dd-f5e2-42d6-93c4-64f533e67872", "sighting--7fd43a59-895f-4fc4-92f7-c6e12861c4ad", "sighting--655c0774-703e-4ec9-8618-d0c8f845f59a", "sighting--b985ec57-1c69-4534-a20f-1aae24e54e2d", "sighting--130cf7ec-4ac0-4b9b-a4d1-fa0ad56bb816", "sighting--96833f9c-c735-476c-87fe-34e8c2830b13", "sighting--ece64ada-932e-4811-b1d4-ef8edee86ccb", "sighting--a40a59f4-ef02-4c7e-9b48-40b1d29325ca", "sighting--02c69c78-6d56-475f-9f0b-eff6a862d4f9", "sighting--743c026e-4424-4d34-a9e4-044832a3e3f8", "sighting--771dba90-6af2-4f31-abed-04abc049b9d1", "sighting--de6f806f-7277-42fd-ae57-afab672f492d", "sighting--6f0eabbf-ad58-4629-a3de-2f1307f6d996", "sighting--5c68bf0a-e6df-460a-8f95-ca01523ef5e3", "sighting--72f79e3c-016e-438d-8fbd-4039b8b84d90", "sighting--ebd4de9e-36e8-4c18-b3ee-117eacd03d33", "sighting--73e82892-623c-42b6-84d1-ada880db4c74", "sighting--48ddb087-5c77-477c-961e-b801f02b15de", "sighting--1c9a2b48-a1b1-4a2b-8da4-393e5c53157e", "sighting--360a86f9-abb3-4e83-9f02-7306da3e0aad", "sighting--dba355f4-3312-40fa-a683-47b4aca67ca0", "sighting--244dd395-678e-4ec6-9ed0-3f4f7a518a17", "sighting--b9eb080a-26f5-4ee1-948d-0e04ff8322e0", "sighting--ccd6735c-aeb1-4579-840c-44058060fe88", "sighting--ecdb3f4c-0c35-4a78-93fd-3405b2b23414", "sighting--607a71b0-7e88-4043-8953-e5b1770b331a", "sighting--8833260b-b090-4ccd-85b3-3d4587a7dd1e", "sighting--da7bc85f-724b-4c0b-8977-2f568a4064ee", "sighting--d979cf52-3112-47f0-be2d-ac1acc638867", "sighting--31b07516-01e0-4c30-adb5-6afc9d438ab7", "sighting--dd045062-05db-4d76-b9fb-0249ab1395d9", "sighting--725f794e-a362-43fd-9129-cb8d0c457526", "sighting--d74bd891-182f-4b11-a122-e4e650e0911e", "sighting--253a74b2-02e7-412c-9d74-9e02809c6796", "sighting--7124c8e3-957f-4b71-8a40-79b46c8cfcb2", "sighting--dbe31a6c-fb46-4a76-ac71-a2bd235cd3c9", "sighting--7a4b700d-61f9-4cdc-85da-bb2720f84208", "sighting--6ffb553b-2d44-4267-87a5-fdc199b601ee", "sighting--9cae4d3c-6d1f-4505-b84c-14b97522cc31", "sighting--3d1cec5b-4ff7-4738-8ada-9ac21e03ca7b", "sighting--3a2b4685-453b-4ed6-8b25-c2ef9ec7b859", "sighting--ed9f3f8b-30a6-4671-8e3e-6bb5720ea115", "sighting--418467c5-8d7f-4e25-9c1c-4529e561414e", "sighting--169c5784-059d-4455-b396-34c9612e560d", "sighting--6fea587a-e289-4209-90ae-74723de89d69", "sighting--7cb5b6ae-b138-4342-b34d-df77fc98c21a", "sighting--38869f11-7865-4a02-8171-f9534a044321", "sighting--22737e06-7c72-4189-b10f-035b1764bcac", "sighting--85e2e60f-6ac2-46f5-946a-48fd22c9a793", "sighting--5379dec7-ad01-4e0b-8257-7b1c1643f073", "sighting--b04d92eb-0e66-442d-a578-d2758046394a", "sighting--aa02875c-74f7-48f0-a66d-acf710340eea", "sighting--c18107a8-4636-41b6-a1ea-d21e6ead6492", "sighting--65c59e60-db65-45e9-8694-52a98d023c2f", "sighting--7a04668e-1161-456f-9dce-e8938f0edf03", "sighting--e155ba03-423a-49af-a64f-cd69640f7732", "sighting--72a4ee2d-7ce3-4abf-8a49-883260d8d1ea", "sighting--46e7d846-3d6c-4244-a9a2-ea9d5c7dba07", "sighting--837d1548-b58c-4d57-9fe9-efcebba6aa3b", "sighting--e4c98fe3-756a-44f3-977c-1846cfcbcbb0", "sighting--0def46c3-5887-486d-97d6-e1046d458b95", "sighting--c71a5d29-da6d-4d24-b66f-81b507532ef2", "sighting--6c1fa771-c808-4892-ba5a-767216497402", "sighting--f2755f11-2aaa-44ce-90b9-1e8e8fa16656", "sighting--e7bb1dc3-056d-45e2-ba48-6c1d289511eb", "sighting--71760b34-4456-49e0-9950-55db94f732fa", "sighting--54d83804-e2d5-4f6c-bfff-8cb62f538b04", "sighting--d1ae9727-2a6a-402b-8c42-773fa5644404", "sighting--71488f53-24b3-45f8-aa6b-de1fbbd857a5", "sighting--699aa467-25c7-4498-9b7b-ef9d7157a2a7", "sighting--11e73db6-b771-45f3-a64a-95f7e804f7cd", "sighting--b4cc6f97-da84-4b16-92ed-b3b99dc20321", "sighting--3a42f8f9-0c39-484a-b275-3cc2434950be", "sighting--245b29ed-99b0-4cf5-9e3e-450347eb56b7", "sighting--4d3faf40-1939-4fe9-b9fe-0a85dc1ce70c", "sighting--15368fcb-efef-404c-8749-03fa406d8a6f", "sighting--ef777a11-8450-4f85-8344-d45bd4e654e9", "sighting--0c14e34f-806d-481a-98a9-f032e9ff8f1e", "sighting--30f12220-1924-4117-a62f-3995012284a6", "sighting--611696fb-423a-4a1c-9284-82bfe18d8e31", "sighting--aa770416-11d1-4106-a5d8-0c39e030be03", "sighting--a6a12fba-acbe-4733-8ea1-69963db5a32a", "sighting--761393a0-ed6d-4ce4-ac18-79e467bb6ebc", "sighting--691a4094-f2de-40a1-8e0a-f92173ef0274", "sighting--4fb96ee1-e223-46fa-bbfe-6bd76edf6754", "sighting--4e1cdc18-d892-474a-9d7b-9ddc5c977561", "sighting--69520d51-e51f-44d7-9dcd-4d9d003b7c57", "sighting--eaea18d2-7749-4c6e-bbe0-63f4b689c573", "sighting--7f18cf34-7725-4fc1-8772-a87793a2f095", "sighting--802d0744-658f-4f52-be03-4a5b7ed93c2a", "sighting--65a1bb20-d10a-4210-82e1-21e33a7d558c", "sighting--5829949f-c9b4-4658-9a3c-7244cafad0dc", "sighting--3b9a249c-2ae6-4ac2-ab6d-e5e172103e19", "sighting--3d8bdf81-88bf-438c-acbc-4169899c1d7e", "sighting--b40d1b0e-ed70-45dc-81dc-1ff2f204cbb2", "sighting--98eb5d36-6eb2-478b-9c12-eb716a1c4c3e", "sighting--54582095-46aa-4653-a863-8e7342e7d61e", "sighting--56c82ee5-14b9-44f6-ac00-0fbb5445ae73", "sighting--1b686952-38f7-4554-9e9d-a0d49c49eb66", "sighting--b4fb5e43-4f47-4d4a-8edb-6ebf7f9b42cf", "sighting--7fbe6492-4554-4310-8974-19faa317770f", "sighting--f574474b-81d6-42d7-b4ed-1ee84dae73b1", "sighting--c52d3dc9-43c4-451b-be47-b6e813dfa45e", "sighting--d3105ac4-de9e-4b9f-b67b-eeeedbc5bbf0", "sighting--aec1530a-d865-482c-bcc3-5e74dca56e8b", "sighting--0f7ae73e-2cb9-46f9-9cd6-3cb214b11dbc", "sighting--69a8e4ed-b0b5-41ea-a124-767bef8b4f0e", "sighting--819a8de2-76e6-4b44-8a95-9f492d7a23f1", "sighting--8e43417a-79d9-4c89-bdb8-a31619129333", "sighting--0a2d8d77-47cc-448c-8f5e-5461c77d1ffd", "sighting--aa647a4b-9d2e-4f9c-a7d1-6b535c6a14be", "sighting--0c66ca82-7804-4738-a792-1ed9cb4e428e", "sighting--6630ca5a-5c07-452f-96b2-d2ae5f885ad7", "sighting--56a0e521-a7bb-467f-84a6-11fb9ff10a32", "sighting--c7365840-5760-4dc2-a56a-776ccdb84ce9", "sighting--66282243-58d7-4c72-87e1-5d222f0175d2", "sighting--9debcead-54fc-4515-ad7e-d6ac17a7e48b", "sighting--0a43386c-73b1-4005-bfde-7b59bcf35e51", "sighting--a5ce7caf-63c5-400a-8664-b3508ddf1a37", "sighting--1b3f129b-ce4f-4a34-ab84-75f501e7dfb2", "sighting--887a9a5c-e053-479e-8156-d6d0aba74218", "sighting--98d1a587-5331-483c-b52a-6357fe423a35", "sighting--f792d04c-e2bc-4537-b969-9b98789cc5f1", "sighting--682fe528-8167-41d5-8122-509585016b2e", "sighting--54c1fc5a-47d3-456e-8cae-a4ae7503b935", "sighting--90ce1f22-e8f5-41ff-96fa-0830681533e7", "sighting--7e3b38ce-fe30-4b0f-bbd8-f2be3bc7ed9b", "sighting--7c95fb4d-7702-4174-b89b-8a436a0777d2", "sighting--67104ecb-51fd-4937-95c5-8199e90e8b46", "sighting--b9855d12-e2f1-405e-ad2a-fde99e720529", "sighting--91909fba-dd6a-4325-b5dd-e34abdcdd4bb", "sighting--0a40e733-785f-49e0-b270-21bcca6b4b8f", "sighting--15122101-cf21-4a3a-8d7e-36ce3678e186", "sighting--198a1e7d-c016-4ac3-ab17-f3016bf582ba", "sighting--d711fd8d-0ffd-49d5-b503-44d78f1ae128", "sighting--ab8b79ec-684b-4569-b218-e80a93e8fcc7", "sighting--5e2ea8a2-0918-44fa-bc31-1879d16e1177", "sighting--12aa5983-8090-4255-ae50-febf38c785f4", "sighting--e343f222-b8d1-48b0-a239-6d7a09ba2c93", "sighting--a3047235-7604-4eb1-9671-2443f99c8410", "sighting--318d4431-278f-4184-a074-03d2c6782622", "sighting--df66875d-0a54-42d4-b748-7510e1d9fe89", "sighting--d3999c91-7e61-42a4-9edd-0507b0642326", "sighting--286448df-6fa5-41f4-94bf-2d5c2e3bb131", "sighting--0d7c65ef-2098-4a45-afbf-733be708107f", "sighting--ddacdbee-03ce-45a8-90f5-4de0d6440560", "sighting--0741fbae-e50a-47f9-913a-ff1c05d83495", "sighting--bd8f035c-b6a2-4814-8537-f724306b1819", "sighting--5b1941aa-1936-4c3e-a384-6673400294c6", "sighting--3daaf9f8-4355-4379-8489-2a091d0e0c71", "sighting--caf3b6d6-8e1f-44e7-af9a-fde8d405f2b6", "sighting--bed50e70-22e6-431e-9994-e01dcbb0de42", "sighting--3164451d-aae0-487f-9524-d526ede4917b", "sighting--3bda98e3-60d4-4bd1-ab62-2b98cea79114", "sighting--2aa7d344-1192-44f1-9e96-09e284e8971e", "sighting--d0fdd70f-7c0a-4638-a7fe-1fc038d3ef10", "sighting--15983cb7-8435-4b0b-994f-f9da4d60bf91", "sighting--04ee33ee-61d8-4bf6-b9a5-b03d0c3fc7aa", "sighting--5af90a61-750a-49bd-935b-0bdf8c87c226", "sighting--4627acc3-0962-4ceb-8c0c-d93cb89f5e9b", "sighting--1e21bd43-ed47-4a63-a5d3-9a4dabe6c616", "sighting--0467cd68-8c4b-4faf-925f-212863697e69", "sighting--628a4c0c-8cf1-4222-bc13-607e344ccbd7", "sighting--09ab067e-d3ee-45c4-8436-be0e953c9586", "sighting--18ea7085-1268-4d31-8751-74d8330fee21", "sighting--a26f2f82-0458-4796-a077-7560efeab63c", "sighting--6c5ebcc9-3301-45da-b90c-fa5aa96f8818", "sighting--f7db8dc4-65ec-4012-9201-b37b77cc2cd3", "sighting--41f5e988-ddad-4602-a4c7-71bdedfc0688", "sighting--0e0cfec3-07c6-4bd0-9584-7fb406cb0d69", "sighting--dfe3da12-b565-405c-89f9-6178ee0846fa", "sighting--bf84a364-7da3-48c5-83c6-f474b95b8a6d", "sighting--61db0697-931c-40f1-92cd-53d84c932fdd", "sighting--c4c32c94-5ae1-44c3-8ad1-6c56933d901f", "sighting--3df5be12-ab22-4d65-bb94-ef4bd882a2af", "sighting--a9f6c6e2-6037-4d11-9b25-c0c27e423040", "sighting--e1c47494-4035-4219-be98-bc9e6b794154", "sighting--c4acae45-9e2d-42ce-8c10-6672cef5ffc9", "sighting--90328610-307c-4750-b2fd-d65ee7f69e8a", "sighting--cca59aad-569b-41f3-bcb0-d9b57798c40d", "sighting--90235fd2-0278-48cb-842f-154a3c6f4053", "sighting--d84d10b7-0101-42d2-ae7b-2470c6ad7e1a", "sighting--6730979a-0ba0-472e-affa-33bfa39a1286", "sighting--22046c84-9128-414e-b2c2-d1285f45c0e8", "sighting--ebfe701e-5921-41b2-b242-c9b4d17c4cd6", "sighting--66fd5681-ce7f-44f2-af6d-5f66e3567318", "sighting--7d3fb714-ac18-4a27-9c5c-283aa8a1ca22", "sighting--cd822e46-9ce1-45e1-9076-158c2fbaba1c", "sighting--943f277f-4ef4-49d6-bb71-c429d8b2d78e", "sighting--a5dc2bc4-b1ce-4ddc-b67e-93274cd7869f", "sighting--5210ff5d-805c-41fd-9557-c6c39916a563", "sighting--3ddf3861-803d-4577-bdfb-9b5add58b724", "sighting--db2841fa-17df-4c05-a21a-a729769384c5", "sighting--84a26cf8-7350-4f35-a330-dfd4b432eb10", "sighting--34d46efd-89c5-42de-9260-a21f8a814f30", "sighting--3dd3fe4e-5b1b-46b6-9bde-655da18fa5b6", "sighting--7e11ab05-3b0b-431d-bdab-428d2fd115f6", "sighting--1d04c284-f4bc-4fff-bc4b-0d854d9dad14", "sighting--d5dafaed-b530-446c-809b-5a99db71230e", "sighting--382970e9-92d8-4aa2-bb07-9820d3afce51", "sighting--78e7de0e-18fb-4600-82cd-00e89c81c987", "sighting--9d9d6d32-b721-41e7-810d-fcb5c31fd7de", "sighting--8cfe2af1-79ee-4681-901e-cc4713050146", "sighting--65358dcf-92ef-4c59-8855-42a19df9e898", "sighting--9ed20988-ee9f-403f-bb5b-f9d7a6311387", "sighting--8b539487-07b6-4abf-8b82-e2de1a77a3d8", "sighting--5ac8d7e1-ea81-4eef-b31e-eb7e36d3dfed", "sighting--633c7d56-3dc3-4896-a577-0362dc09cd24", "sighting--b02116fa-9d72-44c2-8253-79b62873419f", "sighting--c9212c7c-ec87-4831-aac4-e097fd663d1b", "sighting--807f87b4-0bd4-4c7e-a2df-56b21e2e697e", "sighting--e00b19bc-69d4-4101-801a-103e5978b6ef", "sighting--f83936fe-f10c-4bc8-84b0-e171b6819163", "sighting--e455e027-b5ff-4b60-a548-9e381ae33f02", "sighting--44ec9fbc-5c11-48a9-9dfb-6e911683c197", "sighting--b4110429-383f-4f54-b9a9-3b827d11531f", "sighting--114510d8-1a42-4bae-99af-875e4c69aac1", "sighting--c0848428-62ba-4fea-bb9e-04afe06fe875", "sighting--7490c948-527e-4e02-9202-1b6413dbaac1", "sighting--bb6e0624-db5f-4e64-9c69-8470e6977ba6", "sighting--15fb5754-f546-4a0b-ad66-4b01a2499e0d", "sighting--a7aef5b7-3da6-464d-ac48-4492eab86a6d", "sighting--31ca341b-b68f-40fb-954c-d1418f78a01f", "sighting--8e7c84d2-b229-42ef-9474-d8a36730940d", "sighting--3b9d9ef2-31d7-4487-a460-9a7ade222d2b", "sighting--93a5c3be-9942-4640-b0e6-98094326f39c", "sighting--0bd6d998-a038-477d-acac-d11dc1c56d51", "sighting--53416552-2330-410d-a772-741ab00402c5", "sighting--8a521d9c-e758-4808-9a54-c3c73b5a58dd", "sighting--24110d17-f09c-41be-a864-cf54d9833ccd", "sighting--6f1c6a89-3df4-469a-b20f-c78c77de7d85", "sighting--c4930062-514e-47b4-bdc0-bfb5570096d7", "sighting--e70d586a-02c7-4725-a0c5-295bec88c4d5", "sighting--80c6e7be-24ff-4d23-9e77-5609be0378d1", "sighting--8ea88c9b-245f-4656-a25e-7504d367ea5d", "sighting--0ec56627-d6f8-4868-8fa3-c2298be60caa", "sighting--d05f3940-8462-4317-b6f2-95fc476c3e0f", "sighting--0f4f5535-76af-455b-9aab-7fa33b920a80", "sighting--e4c8a277-726b-44e4-b515-3d076af86cf6", "sighting--699dcf35-cf23-4d66-84a3-e6f358bf5ea0", "sighting--6faf87a6-1b23-4c87-82dd-d73fb2c9d2bb", "sighting--21060cc7-aefe-4168-a161-1213de6c5aac", "sighting--883e93cf-0eff-44f3-bdf8-facabb8c00bf", "sighting--6a0b02d5-f7aa-4f26-8c0a-fdb6344e0f52", "sighting--d3d7529f-1a15-47d2-a7f1-0b8c36ec5bc8", "sighting--8f9adc53-7965-4eae-aa38-83d3e5b39618", "sighting--e4c33e01-def2-4679-9a74-a32ab22494e4", "sighting--7e2cfe22-ee4b-4afb-9502-988e9229bb33", "sighting--ff8f16e1-5380-4ee2-bfba-b87542a95aaf", "sighting--0b93c0ba-adf6-4463-9ac9-06bfe13a6fba", "sighting--71269513-1a1f-4fb9-85c9-503630c06445", "sighting--ba940010-9bfd-40f3-99bc-0f6ceac375b2", "sighting--2b1a6c1b-1e67-4e08-8259-909ad8e10610", "sighting--cc2d079d-da06-4616-9c67-d103469fdbe4", "sighting--4fd076f0-789f-4248-b52b-df554042d4bc", "sighting--40326ee2-c252-4309-a4a6-6c5b56d23189", "sighting--f0c684d2-23ff-4bba-b5b1-6c1bd5d72fa1", "sighting--7102f591-7137-437b-8d33-080d4b95b964", "sighting--3ded73ad-3b0b-4698-92ad-c550d2423985", "sighting--4f5e8759-c012-4acc-aed9-339816a2398d", "sighting--d16ccd13-7ebe-44ef-8d08-f05d31721efd", "sighting--f3b19779-109f-4b9f-872e-a145fc4cd8ce", "sighting--8c59bf4c-3e4d-4acf-b4dc-ceac6c56df3f", "sighting--e34dd418-8d9e-4738-89e0-016be6670124", "sighting--250b061d-e8d9-467a-88da-92cb85668fec", "sighting--fdb785b3-d753-436b-942f-3a9152835ff4", "sighting--93f5a6f9-af57-45d0-b3d3-ca8a32ee3381", "sighting--189a5391-4999-44e1-aebb-e4511facff9b", "sighting--ace71087-acf3-4d61-a21c-303daf732548", "sighting--0d54c986-2ee4-49e1-a2b5-6dccaf93f1b2", "sighting--4d0c706d-dbc1-48bc-8136-e8a862c45b77", "sighting--f3c86f37-ab86-430c-9b18-06310737ea5e", "sighting--fd1a155e-66d4-48fe-8d3d-f6afa6553938", "sighting--661b90a4-2f46-4eb6-927e-f776ac6bf2a5", "sighting--6d76c7a0-f975-498e-8375-9a3b31932417", "sighting--68f62c4b-46bd-464e-b43a-054a99d36f06", "sighting--e5aa9e24-710e-454d-9d0a-cf62695e6c36", "sighting--9c3603e9-6f86-4359-bcad-a59823f84229", "sighting--0e7630e2-2515-487b-bc88-3dc5b62fc447", "sighting--d1e2cf7e-b7a2-4a12-abf5-04a69b5623d9", "sighting--52d17e0f-ae8f-4f7f-8582-b5074fbe5dde", "sighting--c0badb80-ce95-485f-9856-5c3ebf85964e", "sighting--d1317d48-2210-42b0-abef-343c4fdb1659", "sighting--13ae5ddb-7feb-4967-ade9-c23c1808580e", "sighting--8ba395dc-0063-4a71-ab88-c13b23641fba", "sighting--baf41cd6-92d2-4c95-9b1f-7aa467cfc2c5", "sighting--a5890cd1-1c13-449f-b51b-09571637c5eb", "sighting--e555f881-3a83-461c-b251-41be4034f931", "sighting--ee70d065-46d7-499c-8fc4-848bf9272dab", "sighting--e327cc69-2aca-42b8-9ebb-eda3b7010c65", "sighting--a17f01fe-d349-48ea-b9af-bbffde12ec7a", "sighting--bb917025-0d09-4c60-b6c3-63ebfea72009", "sighting--734ef4a7-9108-484a-830a-0ec019517803", "sighting--07223e23-b52a-4263-8931-c21867b5622b", "sighting--a9c456ca-bdf3-4343-a909-d8cddb360355", "sighting--4c9d264e-50b5-4519-9e0d-0adaa2ade0e5", "sighting--b2a1c8b9-d1f1-42e9-84a5-a9b34502202b", "sighting--99979b0d-7a6c-489d-acb5-821df16f75bb", "sighting--72aaadf6-c91a-40ab-b529-15aba1b09747", "sighting--b18e7665-303c-4f73-b26f-0d51e8377251", "sighting--80380d7b-aebc-49f1-9291-d2de097a223c", "sighting--c2e23b41-a239-45a6-9a12-bc906086e472", "sighting--3d9cd384-4699-462a-9e4f-a2729904a5b4", "sighting--42afb5b3-e61e-4468-bb38-1380b100af83", "sighting--1d8b207c-79c0-4372-9978-98c209d0c81a", "sighting--3c43ba14-8f45-4d54-9bee-dfd0dac9402d", "sighting--b1401bb2-e1d2-481f-94f6-02c71d21f996", "sighting--5d9201f6-c237-4523-97b6-a25f56daa885", "sighting--592fd19c-2501-492a-9cd4-03a62dde6ca0", "sighting--9b5114c7-6148-4c18-8acb-4417bf578f79", "sighting--7d11ebe9-5d8a-4614-9db8-808d73d3519e", "sighting--d42de865-6055-42d7-9630-661ec35fa428", "sighting--0597f848-f36f-47f5-b7c6-138b2eafeac5", "sighting--be48492b-5a24-4a92-98b8-6c8a0e8fc124", "sighting--77a15cc4-c89a-415e-845c-3bdff0582b2d", "sighting--39d13461-e788-47d0-ade3-c5d4b2e2dd0f", "sighting--46c4f230-fd1f-4c64-8499-6553e6c6ba72", "sighting--0710d63b-1c3d-4517-ab40-306a6596565d", "sighting--efd4f594-e2ba-46a5-b80d-70f87355c868", "sighting--438d1161-1b75-4879-9ead-8511c7c18ded", "sighting--f96fafbe-d031-48b9-8f6d-c41944852f24", "sighting--2728f987-4e3d-4398-8597-53df46fa792f", "sighting--88400e5a-ab08-4a22-a989-949b7dec006c", "sighting--73f3e855-2d88-4df4-9ba9-4b50bb24dc82", "sighting--2f147145-c8b3-490f-8593-27c6ab4e430a", "sighting--6e07376a-b2e7-4537-9f18-0b356108c6d3", "sighting--248e3161-f5a6-4c9d-8f14-0660733fac6f", "sighting--1634ca77-6676-45b5-bea2-5f8296e6e79d", "sighting--47753bbc-f8de-4e9d-a2c2-cb3f0240cca9", "sighting--c923f297-bce3-4a45-992e-1501299c3c70", "sighting--66684d8a-6c40-4150-9a18-e582b5dec18a", "sighting--0bd04571-e17f-4181-bc25-5be2359c2b16", "sighting--b0933ada-2ed2-4885-a243-e5623ff801f6", "sighting--d4e01d1e-8693-425e-94d4-50ad59946a84", "sighting--0bc3b83a-e2cd-4707-a3a1-3b89d305f3bd", "sighting--e57e4af0-6cae-4471-8a05-4906b576bf11", "sighting--da267045-7a91-41b9-87b4-b64b5f9c5235", "sighting--91bd7f31-44bc-42b0-8d7d-9262660f4b83", "sighting--746f08b1-e0f0-405f-aa3d-1712746fd961", "sighting--6dafd57c-5bf3-46ff-a3b4-e84c0080d91b", "sighting--4b5c4490-653c-49ac-8136-8aa8e3fd5491", "sighting--6907dd4c-16f6-4625-9821-adb8b51eca1a", "sighting--642de57c-e7ad-47e2-81dc-576a06cc07ce", "sighting--76348a77-5d79-48f7-83ab-319d303a602a", "sighting--26350d5e-bd67-4803-83d0-0a6dabe0604e", "sighting--592fd146-bb55-46e8-ba05-cee0ceb6bf0a", "sighting--190b8300-c815-4e9b-a1f5-e81dbca46f52", "sighting--c9b4117d-489f-4bc3-829a-25408951713f", "sighting--50442db9-b310-46b2-8f7b-006a88f6f80f", "sighting--2229e916-72e7-4034-aeee-c3b362162b56", "sighting--ca81c0b8-f992-4d28-a110-216bf2b2a4ac", "sighting--af0f8733-ec00-439e-a825-2a02ff2fbe52", "sighting--d424b2ba-fa72-44e7-9a3d-4778aad5d3c4", "sighting--76a5bba2-55b8-4e11-86dc-394e0136e87d", "sighting--0d7d054e-32fa-4d4e-95fd-8c73efd591c7", "sighting--78f75c5d-09af-411e-8112-1c796b1d1b69", "sighting--82576d0f-1250-4d92-9ad4-594f416f6274", "sighting--dcb92e48-0d65-46c6-a727-af3f6420ff16", "sighting--71ed43c9-8c62-4257-8ee7-2d4e523fcef2", "sighting--922a95a5-1f04-4cfa-9a40-26f4a0785b37", "sighting--4b6958d4-3fba-4a39-a4a7-7c20a47268fd", "sighting--971e4b0d-9c70-4058-a267-cc493e27d49b", "sighting--428f38a0-8d25-4296-b69c-0967a649288f", "sighting--a0193c68-0ea1-42f8-942b-b8eb6c1b2730", "sighting--b6aeca37-3e09-444c-8e3d-f739f4e6543d", "sighting--bfd546f0-b11a-4a96-af49-9ce78e762bd0", "sighting--4800eb1d-17a3-41cc-bc7b-671b4bcf2067", "sighting--0bb40e62-09a2-4813-9313-57f44e6ce6ec", "sighting--c7b2c203-8037-4dd9-89dc-db3a752bc3b2", "sighting--b24f048a-09aa-449a-9c43-6bfcf034445f", "sighting--a321a010-f05d-4411-a877-6961bcf89179", "sighting--4e3e3c3f-4c1a-47b4-b1f1-4c3094b47190", "sighting--6400c231-a3c0-478c-92c5-3e2a507f9d63", "sighting--4126b46e-1907-49dd-8009-5804e5b40f28", "sighting--ee764672-c8b6-4641-b923-b2b5fe251f0e", "sighting--73b4d4aa-fbaa-48c8-bbd2-8dd275dff6da", "sighting--e980db27-d637-4e3e-a2a0-cc30fecf7c4d", "sighting--0d509496-22ae-46ff-a2a3-2a2038a59ad8", "sighting--b1c1ff2b-2c6b-472a-87da-6c6b1f3aeebe", "sighting--0f18ea26-0a5e-44a7-b2e5-ed4fc4042245", "sighting--707c413b-5a4a-499d-9999-272578618259", "sighting--9ae47243-b4b5-46ba-8973-6ae4196a6f4b", "sighting--97f96f34-3e4e-4f20-a99b-b5deb01748a9", "sighting--f082f9da-5510-406d-985d-56ceccd36878", "sighting--73751d77-02ad-47f5-b192-6615a713be8e", "sighting--9e022cfc-2439-4c4b-b864-96451d977941", "sighting--fee9298d-563f-482e-8cee-7f309d4f1526", "sighting--49900845-0519-4fe7-b095-9499409910a1", "sighting--9dd23fdb-0f2b-4a62-bb05-60d8f327dd76", "sighting--ce13fa95-007a-4617-b443-3905ebe7f484", "sighting--bd71dd67-3c7e-4fb9-a238-dae381ff0267", "sighting--bf7a9135-99a6-425c-9e4b-0acaf6ec5cc9", "sighting--0da60642-56e6-47e0-ad79-4100b2096520", "sighting--8bf1c216-b508-4c1e-94df-4ac6b7e463af", "sighting--b899f243-0a2f-4d57-85a0-d801a19e74fd", "sighting--05f9ea16-2387-4b51-89b3-900a502d2d0a", "sighting--419112b1-0574-45d7-aae4-6b4d2d781741", "sighting--e62449d9-fbd9-4f30-bc53-a6b76d9d4e46", "sighting--669144c1-62aa-42e9-9758-ddd7665ce89e", "sighting--66db408b-61a9-4f6b-991d-29a023e863db", "sighting--6c7af6aa-a982-4221-84b6-dc1679559518", "sighting--abd71514-5fe0-4f8a-9b93-33c8757cd355", "sighting--5a2fbcaa-fe4e-4be9-93cd-96884ae99867", "sighting--bee52ed5-66e6-4e18-8013-441cee83ae8e", "sighting--c40984af-2916-4315-a1e4-8c08ddd44e7e", "sighting--ed5a6225-017f-4cd4-91ac-07c60c170d46", "sighting--5c749abe-e103-4de1-8ea2-0bd87576453e", "sighting--fd2c54de-2e71-456f-8b36-bc1e86d4a156", "sighting--52e098a7-021b-4884-827c-bb905753ff22", "sighting--7453fdb7-9bc1-4ece-a396-4bd7ea45ab21", "sighting--f92186d9-f56d-45dc-af6d-ec8a7cdbdde4", "sighting--9c31172a-4993-4407-9a6f-743b8ed13207", "sighting--8a914c1d-4bb5-43f8-a8bf-06bbb8014e31", "sighting--0da227f9-38d6-4715-b4da-4ad04fbe5ca3", "sighting--e4fbe7b8-06a9-4b1a-a3ad-fc79272c0865", "sighting--a91d9472-434e-4a79-97bf-f48aa9b72f4b", "sighting--4eb6f756-747d-44fb-b19b-1344954a0311", "sighting--80546140-d5a0-466f-bb84-b45633810bac", "sighting--e7028e37-13ac-4a77-8a86-949789d40d5b", "sighting--e54db1b2-2d67-41b8-b720-4902f4be7d19", "sighting--50c2214b-8aed-40d4-bfde-65a713f744e7", "sighting--9c12944e-9233-440c-a8c3-6969ce59f5e6", "sighting--0a858f6c-3c98-4b00-b665-69504473e19e", "sighting--8b573f77-5d37-4bc4-afca-dbfc386410e3", "sighting--a60ca239-a20d-440f-8d3d-81b63e030933", "sighting--aa04edc8-cd5e-48dc-88e3-eea229afa5ee", "sighting--4419e5bb-4840-4892-bb9e-e27df7ec363a", "sighting--38d8aa3e-be1c-4dda-a03f-addb391a4515", "sighting--5c9e16f8-b7a1-41c4-b91e-aa6174efaf72", "sighting--0fa81b08-29e3-4c8c-8efb-167fc1487a00", "sighting--4d1dcace-52ee-4b5b-9a9b-900e00cf64a5", "sighting--831c2f58-cafd-4f6d-987b-d1d5ec5f5e35", "sighting--819cf658-1e8e-41a5-9994-0a3bdcb466e2", "sighting--a01e58df-bca1-4a6e-bd86-1c2c410517b1", "sighting--486106fa-bc5d-41e8-ad68-1d68d1f26118", "sighting--61b5e739-aee1-4edb-b009-58b8e0540aad", "sighting--e808b0e3-ed4e-45c7-b68b-2214fe2d07b0", "sighting--a50f75d5-998e-4a22-8987-47f25feb0b29", "sighting--0d17d241-f68e-4224-9843-0448b95bd6a8", "sighting--58d5cf03-8e48-466a-bf83-2c7c808c9d90", "sighting--dcdc743d-0990-4792-93ff-7eb19685feb9", "sighting--ada84c30-099d-49fc-9c6b-0b0954256169", "sighting--77ba195a-7131-4fb7-a521-a49cf6f1fe17", "sighting--70bf5c1b-92b0-45d4-b6c6-0029e3060338", "sighting--cc9521f6-e0cf-4d74-a9fb-e90e20b8a811", "sighting--bd7ec228-3cef-4ee0-9c12-f9911737819f", "sighting--9b6de061-0f38-46a7-9c8e-880c7c6dfee2", "sighting--a27a551c-9dde-4908-857c-300df555ead2", "sighting--1b2622ef-69cc-46ac-8c50-57f42c6a1e47", "sighting--a8057a6e-ec48-4568-8be7-2f92ce5c2127", "sighting--09dd8363-8cc8-430d-9b99-641e810c25d4", "sighting--db74788a-29fc-4c80-9ff7-e1fe5c0c66ac", "sighting--a5727cf0-c519-4a91-9fd9-af4a8bbd2464", "sighting--ef3a4d19-164a-47e6-a2ef-e4fb01693af3", "sighting--60429f1f-9fe9-4ce3-9756-6f641bb23820", "sighting--19230a22-0bb1-478c-a6d1-2e4d627693c0", "sighting--4230bc36-ad8b-4354-ab06-6882c4a56ffc", "sighting--cf15b5ce-3631-4aed-b4af-99355e590317", "sighting--62f1125f-a4a1-403d-bc67-38718864e1e3", "sighting--f8922315-c9af-46aa-a2a7-361ee7d54455", "sighting--8f2a465e-b1f4-40b8-8b21-37012464095e", "sighting--a2f18467-bb15-4049-8751-97864b7bbd96", "sighting--6b21fa13-f345-4882-8e97-e5197c994dbc", "sighting--3deeda1c-79fa-4606-82c4-e2d472bd1054", "sighting--7e299bf3-bcc0-4182-9e48-ec989c96cd84", "sighting--60275e0f-c059-4511-a7cd-c26b10f0c267", "sighting--df4cf7b5-a067-4063-a6ac-a37ad2bea47b", "sighting--33b9d325-f7ba-412a-9b3a-d91994d19a13", "sighting--5720f624-22f5-4486-a2c7-a35c4eadb290", "sighting--edeed291-486b-4112-ab9c-448eabb7b62f", "sighting--bfbfd78a-0853-4f76-ae78-30d9b87b4bb3", "sighting--c19a3464-f90d-4e7c-94e8-508e2d6566e2", "sighting--f4c3dcc4-255d-4aa5-9c7d-5b0544b688f3", "sighting--289fa262-9c91-4aca-935f-79b3d239cb28", "sighting--55b22c73-b584-4b36-adab-517b3ba8c851", "sighting--18bd11be-ca4a-4d0c-9a3f-9133bbd7762d", "sighting--e15697cb-699d-41dc-b28b-aaccfff3f624", "sighting--a11acee4-bf77-4815-a249-ddd80cc96713", "sighting--75fe30ba-20af-4ba6-8674-7746e71ccc51", "sighting--ca8a95ac-c587-4143-867e-29583b7532b1", "sighting--875df724-2bb1-4bfd-a85c-75becfbe403d", "sighting--08ccf6af-d9c2-4f12-9118-b69e1d07d094", "sighting--152ffc96-92ea-4ae6-bf78-c4238f2be704", "sighting--7a1b9c9e-3496-4f95-827c-b996669d9366", "sighting--042ebddb-3d42-4604-9dc8-cd989585eb70", "sighting--5c05d4b9-40d3-4ef1-ba46-0681a5e55b36", "sighting--0338763c-a86b-4094-b0cd-67f7925fa849", "sighting--09d308bc-4a5e-48c7-8627-95a8759b9208", "sighting--410638c9-e1bc-4490-9632-e69b528304f3", "sighting--2b19164a-5d51-4729-9b75-210434e2f2fe", "sighting--31d8dd6b-4fdf-4709-97c4-a500f59acce2", "sighting--34dd4d28-27c3-4825-90bf-c12bf3b03131", "sighting--98409cdf-076b-4f21-8396-d401201bc78e", "sighting--e503c4c9-ab10-4734-be78-3c00e9327024", "sighting--d7921780-1622-4392-97bb-a028c3f78536", "sighting--685e9869-fa31-4644-94f9-4423cda235dc", "sighting--5b073031-9383-4f8a-b01c-b12c7ef6eac2", "sighting--89648f49-2c41-469e-80ac-d31e151970cc", "sighting--e5d72b18-a872-4685-8711-fc6900059a34", "sighting--f8bd0a6b-d8ea-4394-ba63-19e39e027d00", "sighting--feede603-a387-46eb-90a1-aeddac06af30", "sighting--23ef05ab-0912-4869-b99a-4f77b1167ff7", "sighting--1bce16fb-61d7-41da-b1b7-d6d60dcf7569", "sighting--1c4d6edb-bfcf-487e-8aa4-19e5b3ffe073", "sighting--2c2446bf-af6c-4a9b-a6d7-d6c1ae711923", "sighting--1325f425-3b31-4e80-9159-996ae049452f", "sighting--fd4fb85f-5621-478b-9442-dd34930af0a4", "sighting--bd93c1cb-0d51-4e36-9c6f-5f85c9836d01", "sighting--123daeee-4b76-47db-b5fc-75abc8127805", "sighting--ac05705e-5bec-4e1a-8500-f4fb317eb029", "sighting--760a892c-c50f-4e86-a02b-6fb88fd2078b", "sighting--d33fad52-5d22-4d36-af6a-0c4de651bb52", "sighting--8c8636bb-510f-4bbb-aea4-bdd5f6e3d125", "sighting--f119b78d-aa2a-4cf9-81e7-e4a1e7dc13a2", "sighting--bdcfdf9c-d462-4483-b0b0-51a9fd9b8b6e", "sighting--c3472879-7783-4fb4-862a-6367e0c6a9f1", "sighting--5200bfd7-c5d9-4bf1-ace7-ad49c05e8625", "sighting--560db9f0-d192-468b-a790-49f16ab87cab", "sighting--22e1fb1c-0165-4ba6-bf23-3f46cf747b3b", "sighting--b1b1a5a0-df43-4d2e-aa12-a965ff126048", "sighting--b4288563-37e9-4f5c-a6a9-24645134ce8c", "sighting--fdf3ba02-9be5-4d60-8b31-2e59dbe3cf33", "sighting--1b6344da-49e0-4473-bf62-086eb23a9444", "sighting--f1bb4745-3d8a-4e5e-a1c7-39a48168bff1", "sighting--73ebcfa0-f1ab-439a-927f-d2455129cc1d", "sighting--2a37b6e8-c99a-4b26-8877-364a69f4ec55", "sighting--5cb9a2da-9447-474e-8fa1-c90b29622efb", "sighting--c07514a9-a891-44d4-a92b-0164bc408826", "sighting--51a464f6-8d93-4353-b0d2-dad91f14c5c7", "sighting--57b54551-832e-4fd3-920b-d8076cd839b0", "sighting--7b847500-3029-4974-87bc-e06a06d8a73a", "sighting--7ba75dfd-f561-4922-b56e-8ed60c995aab", "sighting--c7e51303-2933-4608-bae7-803834dc4444", "sighting--7180fdd6-67a0-4b7a-99af-ea5b005b39e9", "sighting--9545ee35-ad7a-46f4-840b-30457fc234b6", "sighting--ce3ec317-0a80-4050-85d3-1a9c88b1c8b0", "sighting--ef7bf0d5-71b4-4f48-ab6d-eb87f07ad873", "sighting--948fa953-7df6-464a-afd9-cb8fa6423c13", "sighting--22ae0988-f5e0-4cdd-81ab-f52df89b92cc", "sighting--af5424f7-1653-496b-bea2-7c5da58d66e7", "sighting--fcb42190-7b1e-40f1-8525-0d364dfc1b6d", "sighting--0980f914-9923-4225-969f-3f5da594233e", "sighting--28a27d6c-d07e-4589-b4eb-691e413d6f43", "sighting--d0b7dd88-a053-4012-9e4d-fc304432fbd9", "sighting--604b34e4-fb1e-4a84-a21a-ca3b40b4b1bc", "sighting--2be112b6-48bf-4757-a303-a3f52fcf85d6", "sighting--9d52394d-82cb-4644-af5d-412414932915", "sighting--d27c13c2-4314-4010-bab6-5cac8da9b685", "sighting--9c603c3c-2b96-4d1e-8e6c-a9cd20537942", "sighting--2341c2e3-f274-4b91-bfc1-b487e2ef98ad", "sighting--0cf50cac-1eae-4db9-b9d9-e3885a13cd24", "sighting--596af559-ef97-48ca-bcd0-ca6bc29786cb", "sighting--0ba1499b-9736-44aa-bd56-01826e90a7d3", "sighting--bcca5d02-1506-4453-8c30-81fedc2830ff", "sighting--b77f4d23-78d3-44a8-80c5-87d72f02c069", "sighting--809e4e92-7d03-4c50-9a31-da6a822b69c5", "sighting--80da675a-2719-441b-90b2-7053849a4dd3", "sighting--841de00e-6498-4a77-8c45-8bf36767fcc8", "sighting--faf44fd0-3137-4103-8e95-10c1eb663948", "sighting--5192ac24-eaf5-40b9-94db-de4227ca0f83", "sighting--93370045-7146-4719-a4a9-e42d4e1ede4b", "sighting--3a234d82-f3b1-4501-a26c-056dabd7ea74", "sighting--f932a9c7-2ad1-4143-bf7f-6eacf9020842", "sighting--124e54d7-9dd7-4fa9-b75d-d4a1c35b8d47", "sighting--06955d80-f4ef-4e78-97ff-fe74e53d3f2f", "sighting--a3f92206-5166-4587-86dd-6b9536a3714b", "sighting--39581284-b421-4cc4-8da4-8ebe688cc1ab", "sighting--0fe816c5-e734-490f-b4f4-249f66e16257", "sighting--0aca5225-3629-45cd-96e9-d352565d0de0", "sighting--36d5d590-2ff5-49bc-bf2f-ab0a3eba90d1", "sighting--b7bc9076-fba0-4289-a395-b93a9164946e", "sighting--c53ca92f-eaa5-4d61-aefb-820023f2b7f2", "sighting--5cf3575c-1672-4aa0-ab99-88d3458fe49a", "sighting--d3e2d6a6-d441-487f-bf07-5ad2362b85e5", "sighting--cbde839b-f9cf-4618-a8a2-3e3f1dcbd9eb", "sighting--bb53ecc6-624c-44e7-bdf2-8d28a63010b2", "sighting--cad2f29d-f9ff-4bf8-b6d5-1f7a537df8b3", "sighting--0d809ff1-f878-4500-bf2a-febc008852d8", "sighting--d9f4f79f-f656-4dce-9235-30d34892127b", "sighting--b583e342-6b88-413a-9887-0e7b7de92f7e", "sighting--1b124f4e-964e-4131-b8bd-fb35fac49cde", "sighting--7925f569-0c9b-453e-b6c7-3ed33566d681", "sighting--423948ea-8f46-43c8-ab58-cff163cec96a", "sighting--44a4a486-7bc9-4f4a-9e2b-32effb896741", "sighting--d305f795-0a8c-4736-9442-c7cbe7797ab5", "sighting--d99e3be0-fff8-44a9-b20b-4c4a8bbd51a7", "sighting--a98affb7-9078-42de-8bf0-114c58d63594", "sighting--145adc52-bba0-4df3-93d5-bf9aaf4ccbe9", "sighting--b0ab1dfa-549b-41f7-bd1d-ca57daba5d41", "sighting--f726b201-77a0-4347-ab8b-d008f306ea7c", "sighting--067bf139-fae1-4bab-a750-001817168bc7", "sighting--4b0daffb-55e3-44b6-88a3-1998bc9bfd74", "sighting--e6544bea-fe3b-463c-bfb1-46345d5d7f92", "sighting--b115df4a-4940-431c-b570-d645ee1260e9", "sighting--52081ca5-1ec3-4ab9-bd01-2be6402a9e6e", "sighting--14dd94f5-9881-4bac-bc35-046972ddb6bc", "sighting--29f8e8d4-6354-4a0b-996c-11a5022ccbac", "sighting--b6ea8d10-3b75-43c8-b7cd-0261357c24a0", "sighting--11e9ef46-f20e-459e-8c59-941333ecdd69", "sighting--e1ccbb06-ee83-4db3-ba18-30a4aac1f919", "sighting--4cd56f0e-0ac4-4d04-8587-1fe1634babf5", "sighting--542ad0f2-4bb6-448d-9752-6c7d1f119436", "sighting--576a6fbb-f5e9-4054-a06f-6d7394d3784c", "sighting--706b0438-8e48-4d36-ac6b-52ebf443c709", "sighting--95c38a79-2806-460e-ab73-616c70328889", "sighting--afbbd44b-f5f2-4753-b26a-cb56ce5bfdec", "sighting--80aa43a6-d12a-4671-b06d-21515a6cdefd", "sighting--5628ce93-f82e-4244-a23b-e7e0c203d93f", "sighting--d7925548-07b1-4d71-ac6f-eec697fa63d9", "sighting--5bc02966-fd47-4a5c-a962-d762a80fdf03", "sighting--2e28aed4-8e9e-45b4-8334-845dcf6041d8", "sighting--6157394d-3e9d-46e5-a319-e8da80aef9de", "sighting--7d2ced82-4a90-4402-8863-ca47b26b809d", "sighting--7129911e-c77b-4c84-8ad3-2da799647e1d", "sighting--4a66a518-74e5-4107-920c-cea21138cfd3", "sighting--40890302-7a81-4ffd-b427-4dfb3ad6343f", "sighting--66ad655d-7794-4a70-b499-76cc55e628db", "sighting--c8767fa3-fb3d-440f-8dd3-ce7319ecb491", "sighting--0f8fae6e-d618-4788-8565-a847dfee4beb", "sighting--bcfbf5a6-3777-4ad7-b8b0-55ecc35adb2e", "sighting--8a3a1979-8087-4fe3-854f-6c3138240db3", "sighting--efdc8e5c-04ba-4b54-bb99-ad77086fb681", "sighting--47712579-ac56-4195-a8ce-1441b3a52175", "sighting--82c9b6c7-cbe0-4ca0-a511-e1c4a0d98d39", "sighting--3bacfeae-80f2-4506-a102-460b0363c11c", "sighting--a3b1a08e-b6e1-4e13-b582-80daa7f11ed9", "sighting--148f127f-16e5-4571-aa37-6812c1714e3e", "sighting--c3801d7c-9f3d-4440-bb7d-7b917187148f", "sighting--4cda1216-82b4-423c-a74d-d8e2fde54b29", "sighting--0e7571a5-b5e5-47e3-84ec-63da59ff98c3", "sighting--d2d4b211-7122-4431-b36b-a3f45fd5d4a3", "sighting--6c99a5dc-4c9b-4bdd-8180-b6f5c4923412", "sighting--3d9b524d-9e88-4dd4-9122-d62227720c83", "sighting--357eaf81-cc0b-4aad-9a18-bdad42efe046", "sighting--49d710ff-7dde-441c-a849-d202eae4902c", "sighting--281b5890-b2c0-46e7-aac8-927d4a8bf906", "sighting--71b2f001-c0ed-4e72-951b-3ff71ba82690", "sighting--7572888c-882c-468a-8742-c69abab57e48", "sighting--d4f1e648-f035-42f8-90da-a0ea81505ae7", "sighting--4dbafa99-ff5a-4de9-b32d-3c688612ab98", "sighting--f99e5c9d-9a22-431c-8cde-1b4eb1ce259c", "sighting--d600d5b7-667a-4be6-8a07-6502ef0c7624", "sighting--0bdd152b-8d6c-462a-821a-910e32e48c22", "sighting--aa4f0197-f828-4dd0-8b9d-cb832c09022c", "sighting--9e92a240-8161-4cc6-bc94-28d956434c76", "sighting--3a1bf5f4-0eb5-4a5d-9902-e55f0ece2462", "sighting--34446426-f5b2-4b1c-bc09-d114f29e3921", "sighting--61664869-44ca-42d2-8819-e92216e95dfb", "sighting--8dc0cf32-18dd-4691-809a-c7c540253713", "sighting--3abd09d9-5db6-4d01-8b5c-1a21910cd0a5", "sighting--696f16ad-f714-42b6-a475-e6f19fed95f9", "sighting--f9c7302b-bade-49c8-aa90-bcf3a181decf", "sighting--24595bb4-2c2d-4315-ba2e-884405a9ff28", "sighting--cb4cdb27-deec-429b-840d-d3532bf551c7", "sighting--d1dd4f34-17f1-4c51-b71d-ff63c381ede0", "sighting--6f92b6e0-0624-4acc-b1c2-a10d45e72950", "sighting--043b0432-0aff-4310-84dd-68eedd208ad2", "sighting--2f20a0dc-94ac-434b-af1c-d875a608564f", "sighting--06316f9b-bd2d-43ae-98b3-f4fa904110c5", "sighting--ef35d755-c01b-4aa6-9464-482c4d2adb04", "sighting--836e68a5-8b6e-40db-a95a-b9a6197ebac8", "sighting--e18d38cb-a396-4acf-916b-de66ea5bc159", "sighting--f95e76d6-d431-48e5-8bbc-ae947482610c", "sighting--aaf44aba-8dc2-4690-b497-3e93d68cd282", "sighting--fa008723-ee7d-415e-b273-8d598184e3fb", "sighting--8ec6a155-39f8-4570-900f-9547b8b6107b", "sighting--57d91c6f-3812-4efa-ac15-9c669bedf19a", "sighting--f7e75130-4a6c-4e5c-9fa3-41e17747a46f", "sighting--a6545b90-0b91-404d-8a70-7bff6ade3593", "sighting--261d335d-5d6c-4c97-8244-aea206ca9e48", "sighting--295cfba6-279f-4202-bae8-2452333d99ea", "sighting--fcec978b-7d7e-4b74-b95b-98b795ba78d5", "sighting--d9806eae-5bf2-4d88-a934-b02cebb654c2", "sighting--e375a0f8-d469-4508-bc37-234829af38e7", "sighting--235a8930-f4f4-4b6b-bd5d-0172ed9d6e78", "sighting--f97daf3d-ff03-4a65-af25-d4cf40af3dee", "sighting--3277441c-07c6-4f36-9a5f-318abe143663", "sighting--c8395069-e91b-466f-9378-bbeef5bc65b5", "sighting--d8207785-8cb6-47cd-ad82-a365a79c8c83", "sighting--a6255835-7d4b-4bd4-aaca-b877adb8002d", "sighting--797d7f86-5e5d-4ed9-a7a7-b00c3143065e", "sighting--6a471c8d-b4ed-4d84-aa7b-4099575dde96", "sighting--4797005c-c814-4f01-a110-67271cda6ac9", "sighting--5c641fff-5d03-4dc1-a525-68add43650e2", "sighting--b3ab949d-e332-4947-836a-e51ca74e2c08", "sighting--84644be9-8eef-473a-b122-a56516f6f93b", "sighting--383fadc9-8cb1-4348-a5fc-485b73e19aa9", "sighting--21ed894d-43ee-4a36-8759-b6f8b441b496", "sighting--aaa63a82-708f-4cef-94e3-fe0d4ffe1913", "sighting--c5dd2538-ade7-4fc8-aae5-6139c6a80356", "sighting--e08e16d6-a24d-4f01-86d3-0116caa87651", "sighting--f8112f3e-dbf8-4138-a899-9e725028d3c3", "sighting--fe5bdc0d-d839-4539-acec-e3044ffe6900", "sighting--9f1b5ab7-f932-47fc-8c1c-ddcbcdb6a325", "sighting--bb0ed3d0-a810-4f03-9b5d-22cc7efd12d8", "sighting--886a920b-7df0-4dae-8ed3-f1f533b27aef", "sighting--467861a5-4161-46e1-81bc-1c4b2d2c64b6", "sighting--06c18c77-9703-48b6-b465-1dbdb6edc899", "sighting--77b247d5-a16a-407a-8b61-2a0ebb1cb2be", "sighting--34290ccc-ba7e-416f-897a-4ec4a6672b78", "sighting--9a2f3ffd-6574-42cb-a0cc-42cfba2577bd", "sighting--d79a4422-9506-4dc4-baac-56e7a117c8be", "sighting--752c73db-f888-4609-9b82-1e3e5d24aaf8", "sighting--4c788526-6b51-46d3-b307-ac72a900addf", "sighting--f5ca1875-867c-4ee5-bfed-dee49a93bca7", "sighting--85a2b777-8970-4dbf-9a21-801a40176aad", "sighting--b732fb07-f68d-42f9-a7ee-009c236ff4ae", "sighting--be660f60-14b6-44a6-9964-fde05bb3287e", "sighting--b0abe263-e301-410f-b43d-4a989c924bce", "sighting--6a58f0d3-5a2c-4dca-b9e4-add89b39e28c", "sighting--db420804-4e14-447f-a34f-81958f5e886d", "sighting--a173cb83-ca8a-4750-9047-83e8e710d908", "sighting--043a039a-bab6-4227-ab74-83162d77b2f5", "sighting--531bd45a-3175-4494-ab76-390a2b03a2e5", "sighting--a2629348-b92f-4b14-a5b7-b4c2443efdb8", "sighting--73a27852-7fb7-4b71-b45b-1b348eb9bcff", "sighting--9a6554cd-a094-4561-b116-5ead35b79fa8", "sighting--53885393-8472-45ce-bf53-126cd175f45f", "sighting--77d0cc5d-b882-4025-9236-bb6e8af875d5", "sighting--5e7b5e86-bf23-4535-bb55-d9772e4c3267", "sighting--ecb91463-58cc-401a-a434-3166e33275da", "sighting--4dea459a-846d-492a-856e-8d9f62bf3336", "sighting--98bd6927-bb10-44b9-8179-f137c0d017a3", "sighting--a510d015-6729-4530-83c6-5630d1fa29a2", "sighting--3f708887-f85e-487c-b6cc-cdf4ee5fd52c", "sighting--57935a4b-1c72-4a4c-97a7-9b4f39d008c7", "sighting--5e66d4e7-c790-4b00-b424-9ea1a0b22c67", "sighting--f177407e-b326-492b-9a48-2defd20d9bf9", "sighting--03491a2e-b99d-4943-b3cc-f0d5ece751c4", "sighting--7227a8b4-87f1-42c8-862c-289ea67beff3", "sighting--f739910a-a50d-4bbf-9570-91bb187789db", "sighting--58ef86ec-7548-4b25-9b24-1c3f003eb223", "sighting--381bdb61-c99e-4272-bf67-d855021b19e5", "sighting--f1d2fccb-4cab-4bff-9ca2-b03e058d9ee8", "sighting--991e111d-ba1b-43c5-ae72-e830d5aa862b", "sighting--36ac0ce4-de78-4dcb-917b-387bb66e7649", "sighting--cb472a97-9f3a-4182-92e3-3956c3d3a788", "sighting--f977a9eb-fad9-4975-b043-f55c9df853d1", "sighting--522d453f-311c-43c1-9691-c29adec9be42", "sighting--cdde3149-f9b4-4b4d-8f71-576c86b9422b", "sighting--7cd20e6c-6806-4412-a092-c95e038ee11a", "sighting--b33441be-0f22-45ff-b507-12e5cd4a4242", "sighting--9eddaede-21b9-4383-96a8-ce0992f7b30e", "sighting--fd31ccc2-e023-4897-b8ce-5ba7aee18430", "sighting--c8afa165-9301-412f-8a6a-569cd6d30ec2", "sighting--e14da4c0-e977-4213-80ac-6227f38f6d4d", "sighting--69a7486b-82e6-429b-82d9-ed479754400a", "sighting--cd7a7b0a-6c24-472b-9503-577f9e9c3310", "sighting--73604db9-77af-47e4-a1a8-1d702aa7b0b0", "sighting--891402d4-1638-4ccf-b521-7268bc6693f2", "sighting--155b8e45-ed8b-44cf-a441-92e15efdcc18", "sighting--5332ceba-2184-496d-b0f1-da8215e76bff", "sighting--2d73e385-1f0d-4287-aa50-e85acbe5f55d", "sighting--21e89505-7c4e-4d86-aceb-d5be710b0595", "sighting--8544d1ca-ed6c-43ce-84ce-d0891962a861", "sighting--08d8c786-610b-47fc-8f75-0abf7c204ceb", "sighting--78bef52a-5b68-4e05-88b1-48baa8fb9829", "sighting--96a183e5-dc3b-4296-96c9-41193399390c", "sighting--da96e189-99c6-40ec-8e7a-e1c828014b81", "sighting--249bd4df-4e51-463c-b935-cdad8a30d61e", "sighting--c4705488-eaea-4817-942a-d33f0b17d64e", "sighting--3458767b-4a0f-4c87-8603-efc1f44ebc70", "sighting--e74079c5-8838-4f8b-a4ee-7ebd07fad6e2", "sighting--760b0478-b511-430d-9176-42223db467e4", "sighting--9a825f20-bcde-4ae6-9512-1373c7307d8f", "sighting--cf9a1917-ba1c-466a-9048-876eb6bfcd46", "sighting--018cefae-8370-4f0f-8959-ee14ea85849a", "sighting--57009603-18d0-4231-a7c6-0f97c7ef283e", "sighting--55c38d8c-fca3-41e3-bd0d-6c3ff19b51ba", "sighting--22969678-88e5-434a-a142-d275f1299907", "sighting--bb75d0f2-6a76-45ce-abf9-3d610eaa5c79", "sighting--842f7ddf-76d5-4f86-8f75-9fb1dd61e054", "sighting--ea8832d3-ed40-42a1-8484-86ad7bf36b9d", "sighting--6bb8edeb-698b-4356-9858-40cdb1a24660", "sighting--4f079d02-cb0f-4e2f-bafe-8d6616a665c3", "sighting--95b3725d-4699-4114-abff-a886801b5ef2", "sighting--dbe4461a-315e-4d4e-a680-ece3eb4951f2", "sighting--a5eebcf2-02e0-4d3f-8947-2a5379077331", "sighting--09a9513b-8fb4-4333-94b1-733b2133d89a", "sighting--d947618b-033f-462e-86b5-2bab23ddf4ab", "sighting--b3a3372a-2cbf-45e1-9f20-7e098219388c", "sighting--7a6f0ec7-81f9-47c6-861a-324986c050aa", "sighting--9206a1f1-9c3b-480d-a04d-3f2f94141f73", "sighting--2115800d-43da-4d12-bac6-56c66055b244", "sighting--f6acf437-e0bf-41b9-a1d0-e2597ce530ea", "sighting--c37e3856-c1fb-4911-86fe-4ad4a44212ef", "sighting--6c6a1fd9-2878-423e-87e9-a41ea913a27d", "sighting--aae5acb5-3967-4096-9309-ae3d56a29e06", "sighting--6cabd06c-a99e-4ffd-97a1-71dac6ad0da2", "sighting--ca1399e3-aae2-4971-8238-40c11fe7dec7", "sighting--d4b864b8-5b8e-4bcf-a2ea-06fe233c54b6", "sighting--f267eb00-a4f3-41d8-98da-4e6007728392", "sighting--45d7d4d6-0ba4-40e9-accb-8afeef68ca2a", "sighting--b68f200b-4dc8-42dc-b4ed-2bfa2f79a101", "sighting--0f2c1b64-21e9-4eb1-b857-2eb3daab7102", "sighting--52955bc9-b2bf-431e-89a6-b8965ca0f507", "sighting--14f5867f-e996-4f53-90b4-aa2e51ed1fab", "sighting--0da3ce91-5629-469e-bd05-b935233a1a50", "sighting--da9d37f5-e1cd-4734-9d24-d6ca59e61056", "sighting--93662d5c-7bd4-4067-9098-5c24a1b3c654", "sighting--f6f82ae8-eeeb-4cd4-b69b-79e8f49bdede", "sighting--7dced6f9-8e79-4360-980d-03045e19d6cd", "sighting--7ec44152-a87b-4530-ad6f-b505b4670b73", "sighting--bff03739-3bd2-44ee-95f4-5b1d45381c18", "sighting--f81adb2c-d7f1-4eb2-947c-d12853f33912", "sighting--28bab2aa-3360-496c-b517-a33c7025a0c7", "sighting--711c590a-debe-4886-a583-fe0b47b2053f", "sighting--31506c99-e591-4c0d-a755-d65621739216", "sighting--1d4ceeca-fe37-43f6-b2e6-de3f05314dbd", "sighting--487b4c79-e038-473f-b6c0-23151d1de1fa", "sighting--34304f74-17a2-4ad8-8c8d-ed05f508c2f4", "sighting--50c62c4a-07ec-4480-a2f3-c220a8f2bb49", "sighting--8b3c3a5b-c581-447d-9298-8cac05f9365a", "sighting--df3a2d6e-aae8-413f-a630-83e05b35d0ab", "sighting--f99f38ed-38f5-4d16-a5b3-546645adf4ec", "sighting--fa4b369f-e6ad-4e91-ba71-c5203aa1d686", "sighting--c027a9d0-968b-42f1-afb3-999bd1873ec0", "sighting--9a0348a5-e20e-4a8f-80f8-fc825fac6bb5", "sighting--742ea3bb-2105-48e1-a4a2-c796835c439f", "sighting--7edea1d6-1a7f-4df9-a2cd-6fb1bae81848", "sighting--aa3a2998-37e9-4b19-93c6-0664bfcb6edb", "sighting--9f66b362-87db-4187-882e-4994b48d804a", "sighting--74306c9a-5d5e-46a2-af5d-becfd073b3e5", "sighting--1725fecb-e220-487a-abc2-180b9c50ac4f", "sighting--de68a0e0-60b1-4617-bb2b-a3c31ffb6a2c", "sighting--d28dff89-e1f8-49d2-b36b-4ea012f9c12a", "sighting--5844769c-29aa-4f60-9cc7-8b51b6e02cf7", "sighting--c8c30981-9970-4edd-8e3a-c61371b852b4", "sighting--a495d9da-5dd4-414a-92e0-8fb7b6d5cd0e", "sighting--08334ba5-07fd-4abb-b66f-37b89751007b", "sighting--91fd8735-da7d-477c-9cdc-e175039c6abe", "sighting--4853a5cf-59bf-42fe-9434-0c3077535912", "sighting--2b91a34c-e930-4022-bdbd-976b6fddfac5", "sighting--4b5d14c1-4916-4b91-b17c-7894c016530f", "sighting--cf07d0e7-9a91-48f7-b9ec-2adf59366918", "sighting--532bfc77-4341-4c60-80b6-e7c3ecfdde40", "sighting--665dbfd9-598a-45df-8f4b-73f1e5482388", "sighting--3e71d3b2-c6d9-4a91-bd85-9df0c1baff2c", "sighting--664a01e3-0bb9-43a8-af86-ada762ef53f7", "sighting--fe619317-dda6-4248-a7b4-1069e5124977", "sighting--9d37c54e-d0ac-40a7-afdf-9a2bc9ebb755", "sighting--83971197-2e7e-4bd8-920d-9d0a88dbb7f0", "sighting--75cd4fd8-41b2-47be-8370-b4b6ab8d3898", "sighting--bfe82dc3-9a37-4edc-a84b-b315e1ecbd70", "sighting--d11249e5-53a7-4254-a66b-ff9f65b6e21d", "sighting--55dea25c-ee86-4950-9b10-f27b8476a793", "sighting--46be1d5e-7166-4b61-ada0-59ae65b24567", "sighting--4b1df2bb-b313-46ec-99a7-68a600b2cfd7", "sighting--286eb4eb-b3a5-4785-a827-14a5485b2abc", "sighting--2d086d59-89bc-43c1-9c30-39f453d872bd", "sighting--e891dfbb-0299-4814-b905-4af3f0fd22e1", "sighting--9e9a29e8-61e0-44e6-9b45-b61a38e177b0", "sighting--312180b4-cd74-438f-bea1-2d0657b6142d", "sighting--bab65938-1bf9-46a0-bed9-59ea4dbccab0", "sighting--2f27b957-91a3-4692-967d-45ecff626f94", "sighting--f141bc49-6ba0-4f37-9597-56650f79c077", "sighting--808ad4e4-4d1e-4bb1-9eed-0928b69c7642", "sighting--43774937-e2d1-4ff8-9f40-220cff567512", "sighting--646fc3c6-322a-433d-b2ea-a6defa8e0026", "sighting--e2506644-30f6-4d1e-bc38-062b2d8fb4ea", "sighting--8799fd27-5c26-45d7-a534-aaea0bd9f1fc", "sighting--d8919766-d8b5-48a2-a4f9-afc5d0a153c3", "sighting--f2f1375c-5524-43f0-bf85-dbd51da96b60", "sighting--60178ed8-cc0f-42ec-bf4f-c68f31dd6108", "sighting--65b1a880-f1bd-495b-812c-409a6e5eac6f", "sighting--5b4cab64-3d11-4ed0-b81d-467461785e4a", "sighting--86047b8e-b8f9-42e2-9db8-5e3a99c9267e", "sighting--4df911d4-84f5-4aa7-bda0-047d15c827d6", "sighting--3c57b796-17cf-4aa0-aac6-1cee06c8600c", "sighting--8d1e827e-fab8-4b2a-bb90-4d1acf65eea0", "sighting--4bb2ce4e-abcd-4db8-9e01-377ac2e40c9d", "sighting--1403bc49-e5ea-42f5-84dd-3d42c68ba223", "sighting--ff60cc8d-ed9c-4613-8854-d72fe0684674", "sighting--78bb3e59-b822-4c63-b3a7-c89aa5d21618", "sighting--3a4619f4-6284-4523-8a38-c72972643560", "sighting--e7191b86-b4bf-4bf6-8a32-fdaaf27cc302", "sighting--0061bc8d-844e-4133-8f1c-edc3db1515a3", "sighting--ee17bc46-bac8-4e3a-b308-bb22878466dc", "sighting--521d4e6e-1d36-497a-be94-e7e29ffa2d77", "sighting--fa5c0f87-89b4-4626-a090-84680cffca0e", "sighting--8fbd5e36-e044-4098-a275-82769ec427ec", "sighting--bd33cd8c-22ef-4886-ade2-5db07458de13", "sighting--f5e09287-b74d-4c7a-912e-6800b720d4c4", "sighting--7ded1092-1245-4823-8e8e-1e9c15ca8ada", "sighting--81c0afdd-dffa-4816-a680-02c952fa5d8b", "sighting--215e002b-dc57-4371-9921-98ac018d65bb", "sighting--800937c8-7017-4aa3-a014-2bf2d9e06389", "sighting--f262112b-4ba4-4d6a-883a-d582227a13f4", "sighting--b5af3726-0e8f-4324-81b6-89f487e68936", "sighting--3507916b-39a9-47c6-88a6-13bff5b7b7dd", "sighting--ffd66c1b-ba04-4278-ad7e-895c09ea0340", "sighting--848c1b8b-9a1f-4481-9ae7-b041ab6c4f71", "sighting--e8188c07-9cfa-4064-b975-87a74b3abc19", "sighting--e7cc9c8a-8bda-4206-adda-a7ff5952385a", "sighting--a750bc96-e536-4319-8362-c54fc523aa38", "sighting--9a6dc996-e6d0-4327-9688-5064a40a87fd", "sighting--2b82792c-6d21-4fc6-b557-a4544aae3a93", "sighting--72b8a2a5-5db9-4115-9a14-5161d19fc9cb", "sighting--7dc4bebd-6967-4629-a51b-c7d97bc7906b", "sighting--9162ada9-2931-4705-9f5e-e5bbb6459e72", "sighting--5a9eacec-7903-4e58-a175-be98c3548d66", "sighting--d4cc10af-6adc-40c4-8a73-274249f6ee92", "sighting--42399bcb-72f6-43c7-86a4-3098558aed9e", "sighting--e09ac7a7-8c77-4d67-9c91-02b6298a9a6d", "sighting--ca4cf437-0848-4a1b-a6aa-1bd2d50fbb2d", "sighting--9343f466-0a0e-4bd8-8a3f-37708e855445", "sighting--8571a47e-f6d4-4aa4-b395-93f32c85adbc", "sighting--73a26705-4ab3-49c1-a7de-48aac0bd53ae", "sighting--f680f45b-7097-4451-897b-d7b7619d145d", "sighting--ad29f158-1f8a-4411-b6b2-a51215963ecf", "sighting--7aa037a3-0df2-4059-8dd0-072969c28c34", "sighting--151216b0-1117-4aef-aeb9-560fc5d36f9c", "sighting--a9a3ce48-c3e1-4f01-aa8d-17fe9d5c572e", "sighting--96ec5d52-97fa-434e-96aa-a76741d55dbd", "sighting--ead36a4c-1836-4208-b1e5-a0a7946640c1", "sighting--79831a5b-cfe2-4584-8f55-3e00c9fab672", "sighting--5dd731ef-422d-4e76-8cac-49e92761a40e", "sighting--78d3374f-3473-4908-99cb-162b9ef97b9b", "sighting--648a3748-e22a-4098-bb7b-5677c15a08b6", "sighting--c7cf9f0e-d4a6-4bcf-a196-4467924a162e", "sighting--2873badb-871b-408a-840a-0f9305df4e74", "sighting--1e55d763-d980-4ea6-b713-cdc300b43c8c", "sighting--2e00cf00-18d5-4bdc-88d8-f8c5bb57315b", "sighting--8fc560e5-6834-42b5-878c-0edbf48b0536", "sighting--51d0df77-ada0-41fd-a671-932903383faf", "sighting--8a6df577-6df3-4871-b86e-720d4f4d3687", "sighting--30c14e06-2918-4200-9fd6-0db835cbc5e1", "sighting--2235b504-1c72-4036-8db9-01b6238c28df", "sighting--d46f2663-54a0-4578-92e3-58deb87bf179", "sighting--2e9178dc-e475-41db-9b58-6af001159993", "sighting--0dbb21b0-4a63-456a-8e1c-589055f20add", "sighting--db7b08cd-3a62-4206-84d3-868b192c3d1e", "sighting--323e3e98-700b-4033-b72e-e94e352adcbe", "sighting--71a32ed6-444b-4980-b6cc-9f6bf2aad490", "sighting--c8bff98c-30e3-4716-9bc8-047e513e93d4", "sighting--80376708-dafb-4aa6-b670-e7c1ab7cfa5e", "sighting--fd2c6f90-e98a-41bf-8a65-4b848f5e14fd", "sighting--044802df-b81c-4dfb-84c9-7f6bc7a2181e", "sighting--440bde14-49ed-4386-9946-c49e54585ad2", "sighting--39c81c2a-1a99-4493-922f-fe3c9e495f4d", "sighting--5d03509f-d85c-4104-b8da-9481dab50797", "sighting--62a741cb-a613-43b2-bbdc-2233a1e6fea6", "sighting--b2edc195-3be1-4251-ac48-4bfb8eeb1f63", "sighting--952f7566-aaf8-44f0-9051-32a8b87baac0", "sighting--93e7e1aa-64a2-4214-8351-92c1b93cb847", "sighting--4577823c-f4ad-4608-aa09-2a10491d7bac", "sighting--fcf6cb3e-725f-4c23-ab2e-aedc3fd1a999", "sighting--261b9d1f-ad71-4223-be50-7ec196bae14b", "sighting--bdfb3b87-c634-4c95-87e4-f0123bcf8149", "sighting--ed965c53-dfaa-4bc4-8832-e720c71bfd9a", "sighting--3d40eeaf-8d6e-430d-99d4-25785f605f82", "sighting--4835d712-bf76-4391-9c98-4b3fea8caeeb", "sighting--724d188a-efd2-4e4a-84f4-71b453f94930", "sighting--4b340c44-a540-4f20-a63b-756b21d4262c", "sighting--b493a31a-0fc3-41f3-8de7-4c6554240e5d", "sighting--854422ce-7967-4324-9a31-ab03f9a3697e", "sighting--ca7bf522-6165-4d49-9399-1b41f95a4701", "sighting--ebbe907a-45b6-41b6-8d9c-6abc66d90eb3", "sighting--356a6832-2a5c-4266-a9b5-ac57e1f93161", "sighting--a49ff168-058c-4d78-b6e3-2a5ce01c4a5e", "sighting--9843491c-3d97-45e2-b9c7-2b050298e910", "sighting--7f2df2ae-cf16-4a65-bebc-11e530c5aa3f", "sighting--3934c028-7f9f-49ef-a0bc-f0caa0a922b3", "sighting--065dbae3-6daf-46c1-a0e9-649054802d0c", "sighting--a69b17ee-c2b9-4592-aeda-9d3af647f643", "sighting--cd5fa69c-d798-41e0-ae00-492b85fc0524", "sighting--9b3c3c5c-e0af-447e-9a01-21b65765151d", "sighting--c768e801-60fa-4665-94e0-fa5de3441b61", "sighting--cebcfa4b-724e-4875-8715-ed0ec276d181", "sighting--2ba4a365-033a-4483-9e72-e59194f2ad38", "sighting--c66dc716-8f94-4fb5-b3ea-849108399d09", "sighting--779d6bd3-e4d9-4cef-a204-a0a8128af770", "sighting--2f69eb4c-ec19-42f4-841e-86a59bfc144e", "sighting--6b71800a-8e04-45dc-b3a6-10da741b9386", "sighting--b68e86f9-f443-4e18-853d-b102dba4e20f", "sighting--790c7161-a9e3-4ead-a640-cfa86114da92", "sighting--8b7b842c-d27a-48a6-814f-9e9d99de1fa7", "sighting--279b6bde-7743-41ba-98bf-59e075e38e1d", "sighting--eb2538f4-f491-4772-8c30-86f1d44cf967", "sighting--f6c1f1d3-fd64-47e1-9eeb-2d7954a594da", "sighting--978aa0ea-867f-496c-8c71-96753aa03502", "sighting--90a76716-7a39-475c-a662-f98a9c7d5d1c", "sighting--b057ae1c-3750-43d1-bb40-e05a2a1e0929", "sighting--219c1731-78f5-4408-a15b-04881c548103", "sighting--10ee9272-78c2-49bf-b107-54ded3ec2e4a", "sighting--d319d7ac-98a0-48fc-b843-3f2aae160398", "sighting--2584cc0b-b33d-415c-a1b4-927cec9cc67d", "sighting--78bff84c-0dc7-4e5d-bcb8-e0f45174b06c", "sighting--32e496da-fe25-42f1-93f7-6cf946c47513", "sighting--cb4a05cb-803d-4aa3-ab41-17643670dc4b", "sighting--fbfc22a8-f178-4ec3-806d-471ccdd42889", "sighting--c8981f31-41ab-415f-906a-7e58112df5f0", "sighting--d5036fe8-7bce-4c49-b312-3654832a19d8", "sighting--4f2d8bf2-067d-4612-81ee-3367badc253e", "sighting--2032c319-41bd-4578-8c5c-18f97bf9e9d6", "sighting--9f3e0a82-f807-4f7d-8f57-2c70cb9dd1c4", "sighting--b21f97fb-4180-461f-ad7b-730333d77938", "sighting--1a4d961b-3118-4373-a791-1da32b3b9733", "sighting--d54d5d68-ae04-4cc3-b6d3-eb051c5bedc9", "sighting--e5853eba-fe91-4d4f-ba27-d5bc5f384f86", "sighting--fafa48cb-ee80-41d7-80a8-fcaa5366da68", "sighting--6b90f30d-2e4e-47c9-a00a-56fe1c3c7301", "sighting--1d5079b2-a3cb-4305-bc4f-c8cbc32f3000", "sighting--524b9fac-4cdd-4658-af1a-ea8cd683dbe7", "sighting--45df83b3-0e44-41eb-ae4d-9b191f22eca8", "sighting--9e7e0eaf-a1a1-4830-b325-75eb915b3ddc", "sighting--7849b7eb-96c6-440e-9b4d-15a3c3ea94ae", "sighting--735256a8-6500-41cf-8af5-0f0ccca24064", "sighting--a8ea28d7-e20d-4edf-b6a9-592d9fb54cfa", "sighting--f6f80868-b7dd-431f-bbd5-9ff9da11279a", "sighting--cf97520e-44e3-43c1-8e10-e4ce2e0a323d", "sighting--4e46f346-552a-457c-af65-6fffa95ef55d", "sighting--c5b78986-7f37-4fde-9586-60552e5dbf14", "sighting--0710f09b-39cd-41e4-a82e-053e452f68a4", "sighting--4ba28a7d-46b8-4ddf-89b1-3483fb3b77b3", "sighting--22bfbca8-b5c1-4a26-b0cf-f12e99698acf", "sighting--d6538569-0d6b-4db9-8635-536c5ba12f56", "sighting--323e6f4b-490a-4c1a-828c-35e4ab2a1fa5", "sighting--f7d509ab-29e0-4e50-95a2-87b36962b0d2", "sighting--9724338c-a15b-4517-86ac-47de17b05280", "sighting--fc172796-0291-4247-a3b3-6488ccf719f8", "sighting--5dfc8989-dc28-421e-9e6f-3d528000a267", "sighting--43558547-236c-4503-868d-5005480eef4f", "sighting--47ef0e12-e244-4da3-9bcb-550da534af69", "sighting--45f9f522-212d-41d2-a4b4-93b3b4c57229", "sighting--0dc06ce6-71fb-450d-8ce9-f9ffba62e7e5", "sighting--947ff060-cb8d-4a91-852d-1705b13727ba", "sighting--339100f4-2271-41cb-994a-f2796be1ffa7", "sighting--f6dec5ad-2363-4aa5-a625-b7c273a49c6d", "sighting--137cc45b-167f-4d28-acbc-0e25aa44c09c", "sighting--64b1b32b-e1f0-4de0-9b11-d73807f82c59", "sighting--b4964073-e5fc-43e7-ba8d-20ed5a6a1403", "sighting--241b4504-489a-42f2-9ea4-cca13dbfc7b8", "sighting--e743a138-fcd2-45c5-9502-5f9db951d0be", "sighting--775cf384-e209-4138-a23d-66b64504b8ff", "sighting--b3295b8f-b830-4a9d-993c-ca1543f39ab5", "sighting--309e28ed-55f0-4629-bf7b-7c8a47d1a836", "sighting--7ff66e1e-afed-4e21-95f0-a189d92cb56c", "sighting--c9eaa354-ac60-43c0-baf9-c2a7bb7edc64", "sighting--e7d439ac-b86a-45e1-949c-bb2a35b62e40", "sighting--46e0b81d-2233-408b-a6e4-251526644e6e", "sighting--636b8a76-ac23-4f02-9282-b7f14eba14ca", "sighting--7b8b5419-3ecd-471a-ace5-40a6973fdc8b", "sighting--af140ab0-18ba-4b9b-ba99-df0e77cb3db3", "sighting--9e171a4d-25c6-4d84-976b-1c461fd3cf4d", "sighting--9d5d956f-c614-4d55-a4cb-2367ac9f147c", "sighting--426996e4-5d9e-442b-b77d-12902df92b69", "sighting--8b4a548d-0a5e-4d54-accf-cf0e3988c398", "sighting--b7ceaa64-65fb-4070-ad10-9a04cce5155d", "sighting--13bdfdab-eb6c-42c8-a4b0-c2c24386ceb1", "sighting--7e8b10e2-c039-4ff5-a283-4e4584bddd06", "sighting--a0bb03d9-2c8f-4f8b-82b4-57206528f895", "sighting--e28fbefb-6d53-4499-8b49-d3de691100b7", "sighting--301639fc-7d1d-4d54-ba7a-d51b7c435cf2", "sighting--d67a6f37-33f0-4240-a869-708ad1f625de", "sighting--37cb1e67-b143-4294-b653-73418117f18e", "sighting--c4312925-275d-48e7-a8b1-27a6e0842ed4", "sighting--c5fa0e56-0d05-4fb2-aefe-b9691a2408f5", "sighting--4442dde5-03bd-4c10-836b-37f4f1c6aac8", "sighting--f0c37c6e-0ab0-417b-bd74-16e6902aa318", "sighting--ecb1ddf8-a251-48d7-93b8-e6e7bee02e8e", "sighting--9f5235af-542b-459d-9bce-fd4b3a9b5b1d", "sighting--2939e644-c7b4-4313-8a3c-057932deb404", "sighting--055265e0-1ae8-46d7-8cb7-f86de3d4b916", "sighting--2edfc556-007f-45e4-99c8-f5c503922858", "sighting--c5a02410-b008-4e11-9167-035ff43eb773", "sighting--fe362fe1-9c35-4cb3-ab8c-f2f09efa8534", "sighting--0264df4a-e01b-4096-8197-b76e96787cab", "sighting--a52a7bf6-5973-4901-8909-689e80faddb9", "sighting--b162ea03-74fb-44e9-9477-ee6350019262", "sighting--b7aa8818-ff29-485b-bf25-e113f74517b6", "sighting--7527841e-4dba-4b82-976f-7d975e5076f0", "sighting--61e5024b-a72a-49f6-ae1c-2e169ab80c6c", "sighting--6f5d9c62-5dcc-4a20-92be-b82b92cfb71c", "sighting--928d2922-8e32-4360-83f0-7e75473c636e", "sighting--11540bcd-4d79-48bc-a5c0-9a9cf664de3f", "sighting--2e73592d-e0e9-4bdc-b815-30348bf3ae1c", "sighting--9613f56d-efad-4276-b3bc-440cf5f9a4c7", "sighting--2cd60dd2-dc10-4cc0-9dbf-b66e58531b5c", "sighting--a3b5da06-6035-4113-9774-dc1fe51de348", "sighting--21798496-621f-4c17-80e7-405d2aa59ff0", "sighting--c75b57d1-3703-4832-9afe-3f3124812aba", "sighting--9afe82e4-d91d-4317-98c9-01f4b286db53", "sighting--d2194e94-d0b0-4105-9a67-96a2f478cd2b", "sighting--a5b0c1d5-434f-49f4-9b99-d23655ea285b", "sighting--71af09d1-9242-43f6-ba66-1ece3a6a06da", "sighting--1d24a3dd-a661-4e77-9690-8231308a309a", "sighting--39fc7352-b2c5-4311-8f25-8741325ae979", "sighting--56b614cc-90fa-4135-bb6a-86ef67d61f5a", "sighting--cfc087df-5afc-4f4d-9b18-a97d282cb772", "sighting--028088cf-6a69-4fd8-99e1-f1329db73edd", "sighting--ee7a0f22-dedc-4302-b2ad-5c3c93fbbaed", "sighting--f94d952d-3fcc-4eb3-a064-73a9268bfb17", "sighting--93f22037-917e-457f-9413-15d40b649a12", "sighting--c901269e-16c2-402e-8dda-d5f86dec2642", "sighting--4fe1db54-5b3b-4056-bb66-93f7d8da9472", "sighting--99f076f8-64a7-4b52-90b7-41a6635fae7c", "sighting--9420035c-4c0e-47fe-acc1-ce51f9aa10dd", "sighting--01420da6-f25d-47ce-b060-ac471b88c8c7", "sighting--2d511098-6dce-4ef0-8e02-038ce47a9260", "sighting--1af904e2-4298-4e2b-9c74-6cfc6f45ad94", "sighting--983d83d6-8444-428d-918c-4f2e5a5deacc", "sighting--11983bd9-1c2c-44d0-81a0-60efce4e0a6d", "sighting--097b7e91-1cba-48f7-b150-51da7fe5e4f0", "sighting--22e0d876-9878-41bc-9184-4cae239d9ad4", "sighting--ca476050-a96a-4652-9bf4-e72b69a31d0d", "sighting--f46d639a-1321-4ee2-885c-7041e822c551", "sighting--708cb7f8-c19b-4f62-9f6b-c83fe749173b", "sighting--1c0890b7-580d-4b22-848b-e83d17c908c8", "sighting--f5e92356-77ec-44b8-8d7f-7329a9cc0bb4", "sighting--b7efe0d9-69e9-4114-88b6-d5ba65737397", "sighting--a4f7b65a-72f7-4d96-bb02-9b3ecea8845e", "sighting--fec3f20f-628f-4736-a1e5-291442e3ced0", "sighting--fc8d98c9-9f36-438a-89ef-771a7a81e86f", "sighting--c21697e4-30fc-48c9-ac32-d367de39ba18", "sighting--30c76bda-eb3e-4551-a230-bde9cd358235", "sighting--3d3d79ff-fb49-4bb8-a987-40ef0ab78346", "sighting--176d1208-369f-4b74-9839-16cc7d0b71be", "sighting--e53a1488-2ba2-4982-ae13-fbd95c7dd065", "sighting--4c211220-9d78-4c94-8e02-3ef259dd1fbf", "sighting--19fe1b5b-df3a-478d-a79a-44697286c433", "sighting--d5653f3e-f3d4-49b8-8ec1-04139f246c05", "sighting--fc014430-7c8c-4b61-9eb5-909a31828596", "sighting--5ec2e075-379d-49fb-91dc-2152b87db225", "sighting--312e001b-677d-4371-b7bc-bc1db83d31e3", "sighting--b2453909-0424-4929-8f53-193daceff78e", "sighting--72dc9187-9aea-4488-b63a-95399057ff27", "sighting--e3b445bf-32c3-4bff-a048-db57bd93091f", "sighting--45dc0b3f-7bc6-4511-a0e0-51352ae1b612", "sighting--50b83b11-331f-4184-907f-3dd357a515a1", "sighting--68503e3a-9da6-4335-9539-fd25ebf82037", "sighting--a1f0b124-8bf3-4b26-9755-e1a756bb55a9", "sighting--2ea411bf-4af3-43e8-bf9a-28c467f9490a", "sighting--0d0a6c84-fa82-4e63-9318-d9d7a3b79790", "sighting--1620724a-f644-4e5e-a302-d69731b19990", "sighting--a9cd5801-44a5-4168-8c89-249990b5782a", "sighting--aec5a92f-3b9d-4997-8a2b-1f0012ebf807", "sighting--0c8d7105-a1cf-40e9-81a7-333e1ff60775", "sighting--f723cc14-8b82-4144-afcd-890bea22f8ce", "sighting--61fe425e-ba30-4177-aa1a-efcf3796d10c", "sighting--ca5dedd1-b556-467c-bbb7-43b8d5c50f47", "sighting--279b1543-7b7d-433f-89a5-a09a70406c89", "sighting--eda298bb-edda-4cd7-b04b-5130d7c29fd7", "sighting--7af9ca46-6b9d-40a4-a265-0f5ffb21e7d7", "sighting--9b89d88c-f86b-4868-90a7-eda85ff88f79", "sighting--0ad764bf-f74d-4dc3-8104-41e897dc0ee1", "sighting--47fabb20-171e-41f8-ae90-faa8ede0cb70", "sighting--463850e6-4a9f-4dbf-9faf-da9f72f214b1", "sighting--5efa4083-b80a-432e-927a-19783bb71575", "sighting--bdb08394-abfb-4f3a-99f4-6d0ac29df5e1", "sighting--0707dd37-f0cb-4e91-92dd-3baa72e209cf", "sighting--b7eb5bfc-5a94-465a-a733-c013bdd86667", "sighting--4ce5409e-479b-414a-af60-b8a9f602c1ff", "sighting--89f8c45b-1cac-4ed1-8b0c-183d949655ba", "sighting--1dc4d2ff-5cc8-4518-87eb-7eba80bf8489", "sighting--fd91a144-84c8-41bb-a312-23bb9672c15a", "sighting--05d36010-389f-43fc-97f2-38a8c0f14086", "sighting--fb120ece-ffd1-4ec1-8873-fc233bb39511", "sighting--cbff19dc-4cca-4497-8456-a1f885801bae", "sighting--8c6ce2ad-d6a6-4595-9cfb-73b4ce959776", "sighting--73885d68-4a93-4c80-832f-a69dd2ff1fe7", "sighting--a12171a5-c818-41ca-9f34-5888de5bb019", "sighting--676c2105-f247-4e07-9920-9a2c6aa0a778", "sighting--87e50fc2-b56b-466f-8a6e-af4b10105302", "sighting--f573aa3b-9073-4323-9bb6-900049341c55", "sighting--17d95d03-0355-4d83-91de-5a78a71ac038", "sighting--ad4cf17d-7bbe-4878-be43-851a7a3c678a", "sighting--81d7697e-943f-48ed-9e6a-41ea08b66d4c", "sighting--f44d9bbe-7ddb-41bd-a17a-06dd3c135c86", "sighting--7743c7a0-58c5-4cdb-80a6-078da5473350", "sighting--2e132b63-82bf-43cc-8009-33c94e8a3516", "sighting--e751b613-14db-4121-8e68-17f62a789cf0", "sighting--8e324bd8-d052-4b34-b81c-ab6a66de94cb", "sighting--7f2e3db0-d156-4418-9f32-8e2150b1251a", "sighting--e41e44d1-e81f-46dc-843b-180db0ad0215", "sighting--c65745e8-cec9-4474-82e7-79ab04765d7a", "sighting--74c37c79-16e7-4dcb-be0d-2917d5a5e618", "sighting--c71db7e9-70e4-4e42-8bb3-7691b6010ea8", "sighting--92f6eb89-019b-47fa-8dde-ea80949d5d19", "sighting--71de07de-9b6b-4371-a150-d68f44c5e2a7", "sighting--3def51eb-1d78-4334-8acf-8bed07c89335", "sighting--f1f0b8a4-230e-4b67-92e4-376fbc13a8be", "sighting--74bf0e89-10b3-43a4-afd4-448c74b45b4b", "sighting--cb902033-0d88-4d19-9d95-ee678a8fa180", "sighting--1ffae233-702d-4d48-9bb5-f676e570ab20", "sighting--7e02cbd4-8be6-4c84-b607-f4e4e1e186ad", "sighting--b1f7e151-747c-4894-baad-1e30ac6d7a95", "sighting--1f33cd2a-5147-45eb-888c-2769a6716419", "sighting--6c235f58-b1ab-4f8a-995a-857b7a3c23cb", "sighting--b5264468-f8c1-40b0-ac50-cb4ed643d5ea", "sighting--a6e459be-ee0f-4fe5-8738-0b548b939a72", "sighting--78a5a582-42bb-4c4c-8ad4-8f703efc0e61", "sighting--7a29e34d-9c2b-482f-9e50-2a93044a82a3", "sighting--4091e615-7fbd-48e9-ab81-6d1490645c54", "sighting--c365c6ed-120d-4724-a109-694ca8f76b13", "sighting--12943dd0-21dd-42ca-bff6-b827ce98c727", "sighting--af7b4b8d-3a95-49f7-a7a8-7c15e0a1db2e", "sighting--494c1c9b-d618-4ed7-ad55-bcb817ff11dd", "sighting--a89dcd22-b5eb-4f42-a99a-77de15fe2c2e", "sighting--6e78ec8c-da6e-4fcd-954b-c32081c5a8e2", "sighting--f4c87586-e013-4fbb-939a-1eb20713041f", "sighting--bcd0b9c8-4aa9-4ce9-bafc-fa87c02434a1", "sighting--92ffc08c-4a34-4819-ac70-29c285ccf716", "sighting--f145850e-a3cf-4047-a509-4e19b19bbbeb", "sighting--f5172165-7c82-4596-a6bf-b4a43078a77c", "sighting--dda2b7d4-03f0-48d0-8987-e5ae0f4744c5", "sighting--177c35da-7dce-43e4-9dae-5b17b71cb1b9", "sighting--ee4acea2-c3eb-4f84-bb1e-26fba3a0420c", "sighting--8d0ffbde-9407-461f-bde7-43abeacf4caf", "sighting--8612872c-e16d-4471-8b24-9b62810a4717", "sighting--645ccd83-6179-42aa-8c6c-9d4c4c7e0c69", "sighting--9b970373-6588-413d-9c88-ce1367238182", "sighting--1601223b-2980-471a-817b-bf1005a1d0d4", "sighting--3d67d675-1680-4878-bf33-0837c641774b", "sighting--8d8d9140-5242-447d-b2ce-a930851fab61", "sighting--55d33da8-0917-4c6c-a3da-225daba8362b", "sighting--4e1fbe05-051e-43e0-bae2-77b66e49fd98", "sighting--dc49ecf0-c357-46d8-aa22-cef48fc2d4bd", "sighting--fa9b6b30-892b-4ceb-a8ed-9362c90e1703", "sighting--762d79cc-4f49-459e-a721-6c0659478d40", "sighting--9a0ddf11-4bf3-41b9-ab08-4b43bde7ea96", "sighting--838cfc8a-468f-4fc9-8636-8278d27a990d", "sighting--d7283388-c2f0-4de4-af56-4efaf1afb72f", "sighting--ca9358dd-7b1c-4160-b7f6-822a0cceb6cf", "sighting--6e5b570e-badf-4228-837a-8587186a0651", "sighting--36a91c86-d198-4e09-bc82-065efb39f28a", "sighting--42ccd7a2-4562-4133-a46e-0201a14ddcc3", "sighting--050b8127-8f93-4a13-810c-8eae1c57db71", "sighting--70ba4dbe-4e2a-4e1f-8b1b-e2fc0432d706", "sighting--ebf7f0a5-aa82-4e8a-a9db-77ccbe3b990a", "sighting--cca80ac0-b13a-45da-b4e2-52aca05f1e41", "sighting--5d1245f0-fca8-462d-bcb1-2163d54bd96b", "sighting--01ac4277-dd65-4ca4-a54d-1b9f5bda45ea", "sighting--01f29f42-ff05-4cb2-99a8-e9175de67059", "sighting--4914fff0-4f1a-4ec0-92b2-7c98beea14be", "sighting--41a4b160-1341-4c37-b783-963740e1233b", "sighting--c47efe30-cbfe-4fd5-a9e3-7da3d62e4c73", "sighting--66a49b43-b718-4e9c-a889-7661a51613ee", "sighting--cf9cce18-2930-4839-a361-05620256f8be", "sighting--889fa2dd-ba7c-439e-af55-0174864c19c1", "sighting--b1913e4b-5ef1-4a75-8da0-b6441f8b37bb", "sighting--87025070-a516-4618-995c-3510bd73138a", "sighting--0d1b79b7-d531-46e4-a81a-6f3ed9b34104", "sighting--514e75ae-b7de-4a66-a28b-13b62dd736eb", "sighting--0d146327-02c7-45f4-a299-26aea3372a8c", "sighting--0fc30c03-5b81-48cc-a5d2-e08364c16d68", "sighting--f5fccfe6-6d74-400a-8d5f-f555eeffa9e4", "sighting--5f32066a-6775-4ee8-99a4-9250ce0b68de", "sighting--3bb668b7-ecca-4546-be45-48b83d9279e7", "sighting--97528043-a9b8-46c1-bc88-048fea7aec56", "sighting--7dfe5a33-b59a-4a8f-916a-39c9e6284a42", "sighting--fd2fab5f-5f59-4999-8c15-141cae625824", "sighting--3deb230c-a8a1-44c8-b204-31fd34201e9f", "sighting--dc50d9ac-74e6-4884-8cb3-8cd4c17fe4e1", "sighting--3d656768-f986-414f-bce0-48c3201caa75", "sighting--ace6f710-821d-4f55-bc93-4265bda00505", "sighting--3bdde417-311e-4083-8b3a-d202aaadc735", "sighting--31c5adfd-7c55-4112-92e8-73126842ace1", "sighting--38ec1384-1578-46f8-ad99-1ea4e8f8043b", "sighting--afbac106-b406-4fa5-8104-88c25bcce5c7", "sighting--21670e1e-ee69-4555-abe8-e06a3d28deea", "sighting--2d6d7a2a-2660-4ef9-8c4e-2e3a7679078b", "sighting--d2d96882-7f3f-4696-952e-e11ec42539ba", "sighting--e984259c-ab98-4181-af58-9f1d127ce875", "sighting--dd21c250-ec27-4d29-8b92-0938a7e09227", "sighting--78296ebf-64c1-4dd8-88c6-d5f0f336c662", "sighting--87c9673e-064c-4751-8ddf-3a27a74343e3", "sighting--93bc5e24-bd4b-4cc9-87e0-bd28139d455b", "sighting--0974f83b-e963-41ff-a3b1-5a7b1e269949", "sighting--85b053f2-e205-4eba-9d1c-77bf36de48bb", "sighting--116be802-b525-49be-aadf-650b66c63457", "sighting--24534455-3dcf-4e2d-81f1-dd2bb2fc504b", "sighting--87c96c9c-91de-4183-8ee7-2691b43a6cbe", "sighting--341b70a4-16d7-4649-8986-c57893a16a1c", "sighting--cdeabea9-ddfe-4b9a-ae03-d83a7d3a8f18", "sighting--e7e0bdb0-feac-4091-9aa5-d03a80081472", "sighting--05ca9703-a5dc-4d31-9aca-a609bd03f741", "sighting--73f6d05d-0869-46dd-98aa-09cd7ebe558d", "sighting--0ff9b59c-6b86-4407-927b-51237e530dab", "sighting--ec9b4f31-233b-4d05-ab9d-2af587059249", "sighting--fe201bbc-3109-4d97-a6a7-50bd74a1d349", "sighting--4e5bbc2d-6f1d-45de-875b-c2358cfb3d41", "sighting--98a14b80-aa27-4695-985e-51b5706dda80", "sighting--eef36b09-45f8-4c7b-af42-091a20dca14b", "sighting--15542068-8786-4996-adb7-5ff281c55059", "sighting--d8068c8b-dadb-4110-84e4-f71137128c74", "sighting--702ece76-78ec-40b3-a810-914501e1b951", "sighting--d596cc12-5de2-460c-b276-7ed1dc7ae90a", "sighting--64362a09-c094-433f-a7d1-9a62e54d41e5", "sighting--44bef7e4-475a-4559-b873-ce297e1b4849", "sighting--c500758b-2c96-4319-badc-3d13a9ed33ee", "sighting--390ed36a-27b8-44af-96b3-936bd41cf2b1", "sighting--4215a5fc-42a2-401c-8de5-ecc74f6ca665", "sighting--503f52cb-0414-431e-9783-cd769665b2c2", "sighting--b732f586-85e4-44a8-a461-7d03cbcdbfd5", "sighting--638825a7-9f2f-4ce2-82bf-b0cd9eb5a632", "sighting--32223c8f-f0d0-4510-bc26-371fa0e97e34", "sighting--3d992e38-066f-4e10-aa13-d980f649dacf", "sighting--12664e5a-f2c9-4d8d-a510-5b929c072c13", "sighting--c1bd8087-fca4-498d-8465-b3d019a047dc", "sighting--34db819d-361c-4cba-a7a5-65a63b062e3d", "sighting--a7fc53ed-60eb-4bbb-95fa-ef157a3332b7", "sighting--06797dd2-1836-4025-9dfe-a062f2910655", "sighting--70395a87-0a95-49ba-a1e9-203c41869831", "sighting--0a4be63a-f4b3-44c6-b2a0-dbe588e4fbb4", "sighting--ee34f742-1813-4bec-ad16-711cd9cd8b28", "sighting--90333f24-8085-4341-a3f1-59c7137b5f1e", "sighting--e30ace5d-8f1c-4bd2-8e11-197ec6bc0448", "sighting--e72c6fbe-f795-45dc-85b3-6c1d9c820ed2", "sighting--fc10a2ee-891e-4273-8285-34cf5b5d8cbe", "sighting--3d81c38b-9566-41d3-babd-9521d3752464", "sighting--d2dfc869-80fc-48f4-b031-3e0e596bc2ad", "sighting--69f477ed-0283-4f81-be82-d9f0aad60fbb", "sighting--8de615ff-cced-445c-8d87-57bb9976c358", "sighting--32df6068-7c96-4459-9d54-c09f0f92a19e", "sighting--d8139c51-1e64-41b1-900c-c2c6a7d36486", "sighting--9d8da476-9ac9-453a-a889-700ddaeebfec", "sighting--0d074d17-3795-4e96-a3fe-3e8b7aa2a029", "sighting--650d2b72-d076-4efb-8550-fc4bb910ff5a", "sighting--72fff93d-cef8-426a-b4dd-0b4ff7899481", "sighting--5e5b0054-4171-4fb3-8961-710f0f342562", "sighting--3ce50b02-0507-4734-b832-8ad601e3e22e", "sighting--bb4e4c1a-491b-4416-acce-4f2412d3f5af", "sighting--1fbb8a02-b905-47d1-8133-2d098f72dd7b", "sighting--7142956a-9564-4fd1-9927-36e00e3b5783", "sighting--018c83ef-cb85-4fbf-8a73-cc17f3c8991a", "sighting--2d7d11aa-f030-4667-a362-6e4fea0b2a41", "sighting--eb3d39f8-fd50-4bb5-aa00-c99a12bfa145", "sighting--5b00a2fd-d48e-4369-a924-8244a7aa0d3f", "sighting--872af913-5c07-4668-8aa3-214566d605c1", "sighting--3c7c5996-228d-4549-824e-77257e29ab64", "sighting--27923629-1e2f-4cbd-9af1-d9b3ec3842ae", "sighting--5ca8efb0-c4bd-4107-9678-123905b0aeea", "sighting--4c0ac153-2b02-45e4-841f-7333af492d48", "sighting--f41b1fbe-1c55-49a9-ad31-3d0097eba9f6", "sighting--a0cdda6b-8a77-44a3-a658-ac14f1ce34c2", "sighting--d2cd8250-b647-46d9-b52f-edb6b4804452", "sighting--3b718c60-6f40-4a50-8503-f93771b2ee82", "sighting--5b9059c7-b44c-41c1-9279-3ca0bc259e02", "sighting--a0530b0c-9bca-4593-92c3-03b386e0f254", "sighting--b14db092-be7e-4267-9eb8-d9bb1da50714", "sighting--d2142ac8-8267-4fdc-a1bc-2151ec721aad", "sighting--5ca0d2e5-b56e-49fc-bbab-5e13716b053d", "sighting--c50650b1-7293-4756-901f-90272d799541", "sighting--44b04bf7-1bed-4960-ae2c-b32b82549dae", "sighting--17ac2285-d070-4d42-a771-163b84e65c57", "sighting--61530d74-19c5-4401-8e02-260811346b24", "sighting--8ac6b795-88dc-4444-abaf-5ae53299ed06", "sighting--2863bb55-ef29-41d9-a178-0cc904c7981d", "sighting--4c5f3f86-e8b5-4533-aa48-564b3937417f", "sighting--d4b3a96c-03fa-4f21-81ed-5a58ec7eacee", "sighting--d15039a3-3f99-4b98-b543-e21dd378afaf", "sighting--764a92ac-ef12-48df-b0a2-0125532243d5", "sighting--147b0d64-9c50-4b10-a96e-1c2dc325b3e1", "sighting--b72686f3-41cb-4539-b2ae-3f384459505b", "sighting--20630a30-3b61-4e36-9370-078547ef863c", "sighting--fe10ea6b-b7cc-43ba-9597-bdbe1cdb919e", "sighting--43fd360f-6f17-41f6-8d72-8feaaa9df975", "sighting--924c2b5c-ec9e-42cd-8665-d33c5583bb34", "sighting--4121d755-0859-47ca-a54e-69a51224ffa7", "sighting--6f1c0eca-2fbb-4b36-8752-de306f000a55", "sighting--880c5994-ae92-400e-8e8c-e2e2eaa1c551", "sighting--ae23bbbe-a19d-4c95-96a4-50242c1b0133", "sighting--f94453d2-bfa9-4304-acbd-d1fd127958e3", "sighting--3d692f4e-61c7-462e-a326-c5b2059de227", "sighting--aad2b9e5-8059-4d65-b7f2-5474ea3e0542", "sighting--5e451c7c-11db-43fa-92d9-964bfe905ff4", "sighting--f40288ee-1866-410b-a3dd-570bc09e088c", "sighting--c138fc70-4dea-4542-8457-77224924faf5", "sighting--946c3526-4e14-4e90-b7bb-7935091e8db0", "sighting--a4f252f2-3894-4d73-ba9d-9bc9292dddf4", "sighting--360bd616-5882-4660-875f-1eddcba52b6e", "sighting--6fe5208b-19bc-45ec-981f-249dd40e94d4", "sighting--2e9c1613-b0c7-45c4-9159-1d03801a4270", "sighting--3d588913-bb57-42d0-9c46-3af50deb249d", "sighting--3eba1920-5dcd-4b7f-8de2-782fa9c46405", "sighting--eeeaa4fa-743b-425f-a419-41b4238ff772", "sighting--65183760-52f7-438d-af92-0c7b57f31b40", "sighting--48cee4df-53d5-436f-8afa-01b7a78d2da2", "sighting--de65224e-a1e0-47ef-b7a0-53fa4c9b608e", "sighting--28c956fb-a732-4cf4-8c53-09072735e6c3", "sighting--2f8371a1-c053-49c8-b7c3-0268120199a2", "sighting--c14658d7-17bc-4d00-a073-29f90425ce36", "sighting--a8c0cb0a-153a-4875-a2ff-f300b3f3848b", "sighting--a4451562-0a82-4df9-bda2-f670b2c05bf8", "sighting--c063aa2c-a519-4d6e-9e6c-f5780c1954df", "sighting--010b04d3-a83c-45a9-94ad-0e372f4290f4", "sighting--d3e8c503-dafb-4bdc-861d-68545ba52aeb", "sighting--f08d424b-4b5a-474d-a192-a83281d152e2", "sighting--d0c1ab49-606e-4670-bc2c-12ae78fdab8f", "sighting--694ae814-f8eb-4d89-bb09-f6d002e90603", "sighting--eae72497-c9b0-4c4b-9b1d-b17b8f90e75c", "sighting--4c332154-124f-424f-a780-cfbe1fa007ad", "sighting--e3458184-70f5-4dec-9b44-c02083300aba", "sighting--976938bc-8a30-4d22-adc8-c00725429fc7", "sighting--d6d656a9-8aa1-4526-ac18-17e812df2dad", "sighting--432e8461-aba7-40b4-b272-0fc318fcf5c6", "sighting--bcf47ae0-c865-4766-a14a-96d5b823145c", "sighting--7bb4dda4-6803-4f21-a250-0afc89fa3196", "sighting--ff8b387e-d3ce-4658-b392-12fe99c374af", "sighting--8d4d207f-2f02-4100-bd7b-9bd02ea5129b", "sighting--9e8cd986-4d45-4909-b531-7575e0beeb9d", "sighting--d5318af1-e31a-49ed-b14d-d0fb905fc8c7", "sighting--23d88784-b893-4614-bb10-2e650f209aa7", "sighting--e28a78f9-56fd-4e83-8226-bc8ca07af351", "sighting--5b46ca4e-cee3-4d00-83c1-799ee8bfa53c", "sighting--65107950-1c36-4c58-b95f-36337d136eb5", "sighting--9919bf6f-b827-459f-a9dd-760c70efc04a", "sighting--725af68c-e8e2-4e19-b1dc-11624918fd44", "sighting--c16c2f31-3b4a-4afd-aeae-ee0d367d0af4", "sighting--e04ada31-1ed4-4802-83db-caa864bd2d5f", "sighting--49342b55-4c95-4d1d-97f2-aa1ca246c1d3", "sighting--69f0f090-8550-483f-a08d-387baf5568cd", "sighting--642ab31e-8044-4c2a-8fa5-0482a5f7508e", "sighting--f8351742-baa9-4631-9aea-42d9a3072b40", "sighting--2e8927cb-0f8b-4548-99fa-af8f2bd05c60", "sighting--a675420f-065a-44bc-bb25-f1c1407ceac3", "sighting--1a7eedd0-ffea-4441-860a-267bf4f82266", "sighting--aca3a641-a3dd-438c-a776-f8666dc931ea", "sighting--9cf707d6-8512-4ad9-a070-15e939d623a0", "sighting--b3af7274-b986-4606-a911-af98b4d82a04", "sighting--781dece0-3c94-49bc-9b8d-d423d0158d38", "sighting--a4d5b1af-6332-4308-be51-2e81126e0c3b", "sighting--5e087599-acb6-49b7-809e-cf3d39a7ae08", "sighting--74ae4dae-5d39-4dc8-88f6-7d7e06b03215", "sighting--108ec344-b10a-4d9c-9c91-5cc1d5c76783", "sighting--37a8a5a0-b871-4462-baaa-4b2a80ed13d3", "sighting--f1346453-806e-4fc4-b024-f60ea79a5a8d", "sighting--cf3f7c83-87f9-4e03-9e1c-794d098efcbb", "sighting--e43dc18b-64dc-4ac2-95f7-9d5ee429dd46", "sighting--06265f51-e6cb-48fe-aa51-040186efcdf3", "sighting--24171513-8671-489b-88c1-865178b3b4f1", "sighting--efb35cd6-78ae-49aa-b15a-4d187c468eb6", "sighting--a6efebc9-9c06-4c82-9777-467ee1bb516e", "sighting--6b5881dd-c1b0-4f37-96b9-977de56f8196", "sighting--b16d01b9-5bff-47b4-87b1-f5e9941ccf9b", "sighting--b698f6a9-38d0-4e08-8ff4-57dd280ad577", "sighting--f018309a-3bc2-4431-aebc-ccc017aab636", "sighting--18f55b1c-0d20-4cb2-81e3-034ecbe8a4b0", "sighting--22282c30-0a1f-4488-aa01-92f105d7cf5f", "sighting--022e0553-a6c9-4c59-9346-0641c7175288", "sighting--5859c0ab-5d1d-46ae-9765-d54d26488753", "sighting--ebf6aab6-acbb-437c-b021-046ef0f268aa", "sighting--15cdd89b-4d82-433e-8c5d-94ed6d189f92", "sighting--5cbc04e4-17c4-489f-b624-91217fc1ba2f", "sighting--879989b4-7ac1-4a4f-9e19-4badb86bfca9", "sighting--7ca78edf-ccdb-4561-a0d9-24f0ca2c7484", "sighting--2a627790-bb08-4e8e-982a-131b7a0a95b7", "sighting--9250c633-e384-4ee6-b415-afd14e7cc6a3", "sighting--f665129a-c16e-4901-815a-f9ea23a326fd", "sighting--69e366b1-263c-4a5c-96bc-ea678b265f3b", "sighting--21a9db2a-70c9-4a54-a582-e8cc5dbe3b96", "sighting--e1278f02-0583-4d62-84de-a97e6d3f9b0a", "sighting--613757e7-74fa-4653-8930-68534c3b2710", "sighting--0d6577b0-79b1-45be-a7fc-61735970fd63", "sighting--2b36713b-602d-4597-806f-dee099dcff18", "sighting--a6be3331-4229-4d6c-9a04-a627bfdbe844", "sighting--1ad4a581-651f-4fb8-827e-f345ea34a7fe", "sighting--aa3b8e0a-ffd7-43c9-aae0-429b9c6b3549", "sighting--f1281622-ea20-4f66-b65b-9e2f10e5be9c", "sighting--aae67384-e33e-4f08-b9c3-5245b3229d0d", "sighting--32555212-2b0b-4f04-9ec4-eaf077af6596", "sighting--ddc1e522-6ceb-4c9a-a13b-cb6be824033e", "sighting--34952dce-f79c-4b8c-b6b7-09b3788a7e6a", "sighting--5aac49a1-ecde-4623-9c45-3ba653d0bc23", "sighting--46278c7f-7aa4-496b-8a87-d4ddd884f328", "sighting--2a62f115-6bee-41c0-96e4-c6552b296ef5", "sighting--06ae429c-ce72-48c1-8629-539df89b8a16", "sighting--e4681b3e-c30d-4dbd-a606-9304c1c389bb", "sighting--36bf2a12-2ecd-4a50-8a95-7f6264ee3025", "sighting--0a4b542c-6749-44e4-9734-ae33093da458", "sighting--35ce68f7-ca89-4c47-96f4-b077f67fe2d6", "sighting--8a7320c4-5335-44b5-916d-8b31ad738aa0", "sighting--769dee5a-a62a-4845-90f7-0560cc4494f4", "sighting--0564db45-469f-4b70-9aef-5a9422ab4d56", "sighting--042840eb-cdc8-4466-9451-3aafeb2500e4", "sighting--b66b9331-4d66-4987-8236-935ace50d164", "sighting--4151d337-850d-4643-b7a5-facec1b7f9a8", "sighting--493c3645-f1e2-4920-b598-8b65bc4cfee4", "sighting--1f18f3f5-312e-42e5-b520-98d166b0ef79", "sighting--1a870c01-a289-49d2-9200-59b2b4563d00", "sighting--bf16d20c-719f-4058-afa6-309a5d3fbc6e", "sighting--1a161fbe-41e0-4917-b47d-bf5f98820836", "sighting--d6ba04e4-15c2-4134-b345-7bfca5d1099b", "sighting--17afd9e7-94f4-4601-bd1b-60f30b88a918", "sighting--b935cebd-7e3e-49de-88a8-5dbfbaacc53c", "sighting--01404760-848d-4d8d-945d-7e9e016e2112", "sighting--82afec60-5c1c-4622-83cc-ddffb2fc8c39", "sighting--6a80622a-7ffb-4df2-b7ec-e8bb38d7f329", "sighting--f3ede097-7fd0-4bf6-8455-ae954a660f08", "sighting--03a69b94-929d-4d76-b643-20f76ca5d23f", "sighting--3a2cec89-fcb1-4e2c-8e09-5002663a5d4f", "sighting--8097b7bf-b73c-4c00-bc40-a2729b78b2e8", "sighting--741f3324-db72-458f-819d-8635992749ec", "sighting--a2f05fea-0ba9-44da-b2f6-5cd2fcf9e754", "sighting--3a8affb3-035d-4141-9954-a6b804990f9c", "sighting--4607a39b-dbea-45a6-90c4-debce9ef5eae", "sighting--6e0cb0fa-e5d6-49c7-9e9c-314b44cd9a30", "sighting--32214d9d-2d23-4df6-9be9-0fae5c4a4a28", "sighting--97a7cd76-cba5-4f3f-b330-3f36331d0565", "sighting--1e076761-9970-4920-bb06-19def944b216", "sighting--2537f1c4-a64a-4b53-bcb3-849698f6b819", "sighting--0b07abc1-b10f-43ed-905c-e7f70da2f373", "sighting--4a37165c-acb6-45cc-b8da-a090fe6c78d3", "sighting--01b96bd1-0147-466a-a97e-79a8430b31d5", "sighting--1aa8dafe-cf7f-4efb-a4d5-651db776ffdf", "sighting--8b2552b0-5542-4136-bed7-197efebfa23e", "sighting--db23385b-e47f-4aa4-92d0-20e85f030845", "sighting--3e90b181-2ced-4c48-9919-eb0924d88d32", "sighting--3c71bc9b-3855-421e-bfba-f39bdc8cada8", "sighting--8632c7cd-83fd-4b77-bcf9-10e60c292a11", "sighting--c5b576a9-273d-4fea-af40-012e7a77ad5a", "sighting--148ace5a-393a-4447-ada7-2f9bf3f0b85b", "sighting--55defaad-4d93-476b-a5f4-6b7a0e1c81d4", "sighting--81d73888-847e-41cb-bbd1-3a4c4eed0159", "sighting--b2762843-41cd-4f9c-9223-412a8df54a62", "sighting--0cbc1fb4-f2c2-418d-a9e6-0621409cb400", "sighting--204508ea-9679-4bb3-bb81-c69274f40f17", "sighting--6d98d19b-be77-4e0b-adca-842e8cc2dba9", "sighting--863b07cd-0a6d-4a9a-bd35-e8927da72365", "sighting--9cffcee2-acd8-4f3d-a8e9-3213f2a7d5d3", "sighting--f6fd0e5a-553e-44f5-a3b4-ca3284ab5879", "sighting--ab907e1e-d0c9-433b-8fb7-039be80103fe", "sighting--2836d656-e457-4058-b0f4-a084cd5809ea", "sighting--d29af7d8-a79a-44e0-9fb0-7c6044bd915a", "sighting--bdae51d9-e958-4aa3-84a4-766e0816042c", "sighting--ba23a819-115d-41bf-a45f-99b937ec8214", "sighting--9678accb-f4f0-4cac-ab5f-9986a316743b", "sighting--4527dcca-fd4c-4cdb-a5c8-8b4cec6317bd", "sighting--13254e5d-5d34-4a28-9472-d687c738cc66", "sighting--5968ca54-343e-4555-8371-c1227472bfc9", "sighting--c3a04ff5-741b-4f25-b498-6418edf73d40", "sighting--05703960-cc6e-4b62-946a-abe6eda778ab", "sighting--1a15cb91-2fe6-4719-82b9-f29aafeacec0", "sighting--7f4c7871-d9f1-43c9-bec7-6239bd9d3395", "sighting--0a18d152-4b40-42d3-ab5b-a09430a429c2", "sighting--025aa09a-7ab7-48eb-991d-d6ce65a7f7e1", "sighting--f2258221-e934-49b2-8ed9-7ec5039542c8", "sighting--0ba1e5bc-ae67-4c76-be25-0c730bb45d60", "sighting--edb3b086-962b-4c30-806b-9d2789e3b26b", "sighting--0c3efb78-96b2-4ec6-a90d-c8150c4bb608", "sighting--875e21ba-21f0-4cc4-8709-246a37234484", "sighting--e1162791-8252-49fd-a141-f25c1eedf10f", "sighting--e0ab0665-7c24-4981-93d4-e42f49db771a", "sighting--5a2a6752-54d9-430c-9266-0f68ab761b2c", "sighting--bd510de0-8cf4-4676-9634-dd76da7eaf14", "sighting--e672f4d4-7b55-4209-9a54-6a951417a557", "sighting--9ffde1fc-e8e2-40ea-943c-33d06974f4d5", "sighting--c261355f-0f80-467b-b1ed-2554c297729c", "sighting--22a0039d-2b96-425e-ba58-e9e8674a6556", "sighting--f9cab2d2-b7f4-416d-af47-7d52041e3826", "sighting--d93e6865-0b0e-4a0c-af45-c01f11704274", "sighting--3d483fa1-a271-40d4-8109-cedc15e0ffce", "sighting--3dcfc618-7fff-448a-93c0-3a0016f97efa", "sighting--18a36dac-5a40-46d3-9611-beddc6c3986d", "sighting--56aca5a4-4901-4be3-884a-eddbcc55b0e1", "sighting--aef6eda1-2170-4eb9-b035-f7f4b39d4525", "sighting--05ab4d33-d688-41e9-8c28-de354dbf68b8", "sighting--0556e374-02c3-4e36-95d9-03449c647026", "sighting--c1a8491d-ae48-4b02-bd82-e08f60049881", "sighting--7355ed49-2cbd-4e7e-a78c-757b7f04f12c", "sighting--6b6ab779-ad98-4e8d-b760-ea25b464e67f", "sighting--f3f147f0-87ca-4411-a3f8-e3e03246be87", "sighting--031009b0-b02d-4274-a0df-0fb890689ef5", "sighting--97d6bf47-03f7-4035-a042-eab0bb4dece8", "sighting--b682ab06-848f-456a-8d92-aee6d602b017", "sighting--165616f2-61b1-4ade-8e60-16f8adc4bcce", "sighting--a7444caf-d512-4bca-9d6b-77af372e7a7c", "sighting--597817d3-ff77-4e63-95d8-ffe929ea212e", "sighting--f5cf2fc9-2e6f-477e-836c-3bd074313c82", "sighting--3409a33f-a880-405c-994a-29414dd1fff1", "sighting--63675295-30ff-41fa-8c64-d7966057e1b2", "sighting--4d2ac03c-1460-4c25-9474-c8c7ef9078ed", "sighting--59c013f6-6d63-4183-ad89-6c16ae752f13", "sighting--f484d094-1702-4aef-9db4-6032b99c4752", "sighting--dcd4f119-ec07-416b-877d-c8f626393866", "sighting--e3029614-f9a7-41d8-9b92-5e6bc487c2e9", "sighting--c4aace82-cee2-4d06-aeba-7d6a1b88e547", "sighting--8e1a8274-79cc-41e0-8c0c-14003be40799", "sighting--44d72132-fdb5-403e-8b67-f5c75d36b935", "sighting--e45825d5-ba2d-40f7-8cc0-b6401475f51b", "sighting--535c7a72-96a6-4a7b-a2a8-762a0eebfb31", "sighting--3697d227-cb8f-4ed1-a599-4f73da08d711", "sighting--c0f8e1d3-795e-47b1-ae65-4d99a5e13bb7", "sighting--1ce0e52f-6954-4089-a9df-164c917fb913", "sighting--59f01bcb-2109-4ecd-a7b6-38a10e278326", "sighting--a97e0914-d035-4e95-b9a0-2164e3d0d8a0", "sighting--24d4f379-b7b8-4ecd-908b-5fb78f648b9e", "sighting--07cf4e3b-becc-4eb2-a19e-cc0ee1301e02", "sighting--31ad39ae-2b91-4e5d-8e7d-27182a5d4164", "sighting--95d74eff-00c8-4016-bbe8-7d88a5134ddd", "sighting--ef76128a-b4f4-448d-b812-0e3274ed93bf", "sighting--9eb38f62-5994-4053-8f8f-ab6a7f762e23", "sighting--6c76310c-df89-4dd0-b1ee-1ca813b5c0fe", "sighting--800a99d8-207a-4c22-b6f4-240ef3763334", "sighting--35bbb141-c5de-439f-9b53-1028d97f5de7", "sighting--a1f72d79-a714-4776-817d-ebd0b998b0c2", "sighting--95a58c8d-b7c1-4a7d-91c2-fdc5ef80e3dc", "sighting--4db49cbb-7368-42ab-babc-cfadda79aea4", "sighting--ade0b53d-04dd-4595-98ab-1f9ab3cce1aa", "sighting--869162a7-34e4-4973-9e8f-d36dc038a3e7", "sighting--c9512188-3666-49b4-a392-cea59ac724f1", "sighting--f840c78b-f5a8-49c0-bc4b-e4f7b15e390d", "sighting--759ee478-681f-400a-8cf2-e710527383f7", "sighting--2aeb69da-4985-4a9d-8cfd-e7e56e12d5fa", "sighting--c4901725-8e96-4a57-ae3a-6320e685cc42", "sighting--eccb399c-d4fc-49ac-9323-9197f430d10e", "sighting--e335f1ae-b786-4ba3-bbc5-57e5172ffada", "sighting--c1062e12-73f4-438a-a173-4741e3dbdbd0", "sighting--aac2533b-54a6-4f66-8486-e4cf42e7d770", "sighting--b839719c-44fb-4b6f-a257-e342812ba841", "sighting--32fb9c5d-ca42-4e8f-b6e7-b92fb8e8e7c1", "sighting--fa486e9f-e353-4bf1-b6e0-57127666a063", "sighting--61b6c19d-8dec-468b-8e6f-4548ed565ec9", "sighting--8a98c15d-6d85-46ee-b549-41bef182cc6d", "sighting--6fc98f0e-c8a1-43cf-85c7-f6ef367cfcd8", "sighting--eb334025-af00-4d1c-80b1-b46067162cb5", "sighting--57951f31-147c-433a-b164-bd977e4260ff", "sighting--3730bfd8-da52-4ad3-97e9-8730d9b15d30", "sighting--bfd80e36-f836-4642-a2ba-7838cea4af47", "sighting--9331ee73-f9f8-4f07-bc78-c0122025ba82", "sighting--722ee2a1-4ba3-4a9a-a1de-44669fc8a2e2", "sighting--4dfa7350-3d0a-4422-8c49-02990edc3b89", "sighting--ac7f0a3e-66e9-4783-97ed-9eda8e016d03", "sighting--21bb7da4-59fb-431d-9f42-21d9060efa68", "sighting--5c0be3ed-c51c-4b36-9fab-687ccff136ce", "sighting--eb941b50-ade7-4ed7-b199-68c6945b2cf4", "sighting--e2d3112d-93d0-44dc-9045-d1fa280b6adc", "sighting--39eb42c8-da45-46c7-9075-f8774b3211cd", "sighting--7e2858ad-6b73-4ba1-8cc9-e3af2750acbf", "sighting--87224e1d-2031-49ab-8b9a-f2b5709bb262", "sighting--6ff27d49-478f-45ff-95a6-b4ed6cb9008c", "sighting--7365606b-7b70-4616-9542-6553c9ac7a6c", "sighting--6ef4a110-655f-4aa2-ab3a-987cf4cbaa4a", "sighting--59bb5920-2ea8-4c07-a973-f0e6b179bdb4", "sighting--6f02df03-425b-458e-8e87-c0f3cce4b14e", "sighting--2040c656-5466-4a21-9540-0501639f3409", "sighting--7aa6d5ee-542e-4c3d-9d87-580172c9a2f6", "sighting--8b17cf40-fe81-4a91-aaec-c84337cc4e1d", "sighting--7487f1ac-9ebc-4eda-b5a0-951f8c91f7eb", "sighting--b8ac6481-562c-4d8f-ae23-d0ba8d5df49c", "sighting--4ffb5cda-3c4d-40a6-8864-457c5020b4e6", "sighting--37b8d333-a3af-4f01-9296-7212c2db5660", "sighting--250e73e8-27cf-4e49-9a34-02a610a157a6", "sighting--d60f2458-25b9-4e4a-af9a-805adbd06d2d", "sighting--e44784dc-b8bb-4b41-993c-7c555f9cfd3c", "sighting--d8715e62-ce71-427b-a793-a777fd487973", "sighting--5b0d20af-fe51-425c-b3fb-f55a6589dcda", "sighting--437dd7e6-1ba7-4992-94ab-227419c26ceb", "sighting--a356d8c1-353a-4bb4-9630-36711aa72a8c", "sighting--dd29bc69-e8b3-4c5b-a63d-ddc2819831e1", "sighting--e3d2528a-6f3c-4e86-886e-b63d391c1db0", "sighting--5033ef9a-58b4-465a-8280-eb56b978654e", "sighting--bb8076de-e232-44a6-a0df-7b7a4add53d6", "sighting--4a0666ff-b841-4fa3-953f-998e9f371405", "sighting--b519b0c0-c448-4783-bcd4-131cf7a8c9d8", "sighting--8762cbe7-8be5-43b6-a01f-c4475b0e7774", "sighting--502dd519-5e2c-420d-815d-30931df7b5a2", "sighting--7f6c527d-7926-4bb6-a325-6b76bc9b338e", "sighting--956d5c5c-7cb3-46d8-935e-0a93f0540744", "sighting--8dbfd1b2-a3a9-479c-ac29-7a4aa9d860be", "sighting--7b673f26-8853-4aa1-a8d4-ca8a63f3ed53", "sighting--f50f94df-9d7d-40c1-ae8a-1561d2e02b97", "sighting--4bccd604-fab4-4d23-a286-25e213500a26", "sighting--ca5737d0-bcdc-486a-8c92-e11b6453828c", "sighting--a1f82c04-3c28-4aff-975d-445007c81258", "sighting--9fcf66fe-70c7-4304-8905-9df27b316c17", "sighting--214a01c6-d0c6-4b76-852d-d24c64e2ee6d", "sighting--2d378147-b0d2-490e-8797-40293d95ba86", "sighting--66f33df6-56f9-42a7-8884-87038a22df90", "sighting--8854a7d9-c1cb-4d6d-82aa-b44dce34f969", "sighting--03bee7ee-af9a-4561-ad17-df6515e48494", "sighting--ca55b712-10b6-4cb7-889a-97eff691b8ae", "sighting--11508112-55ef-49da-ae56-ebac121689ba", "sighting--4659a14f-cd78-4cc9-885b-cf22001dad1d", "sighting--93cd29d1-dc6d-4cb4-9422-5ccb320bded3", "sighting--06481841-4dce-4bdc-afac-22331bc314a2", "sighting--ae26d483-86a3-4584-b6dc-27adc24d91d9", "sighting--e4d23173-7596-4d2e-a8ea-d57c3c25cb2a", "sighting--0bf85452-2222-45a6-8f5d-bff94fce134d", "sighting--214694a0-4133-44a1-919a-ae692c2a3ed0", "sighting--2f18d233-cd0b-419a-a919-802d0683603a", "sighting--df8a2930-322a-43f3-9bea-8a9f4917ba37", "sighting--f5fc3afc-9455-4307-8ed8-79537bf956fa", "sighting--91680b7d-94d2-4580-8081-f1f34a1d5c92", "sighting--386f1e3f-a0b0-4466-b7ee-ef1c1e23c080", "sighting--7baabd58-36f7-438d-9d0f-e19a3106711e", "sighting--b6b9afba-127f-4f94-ad02-e9a79d5a200a", "sighting--3365f019-3633-4773-8d94-18aea16bfc89", "sighting--5202222e-209e-4298-8ae9-319f1c6cc667", "sighting--60b088e1-1e2e-428e-8d98-6106e89e23ac", "sighting--9426a3bc-4e98-4cd8-a9ec-1618d3d35299", "sighting--3e7697d1-dab5-4ca4-83e1-b5fdcd762ab6", "sighting--42f56417-2e1e-42a2-9574-a3597fec1841", "sighting--7bb78993-ebff-4623-9bb3-1603e16d8e85", "sighting--076515b8-7502-4259-acc0-4308be0d34dc", "sighting--84df7c31-e152-4d92-9e2a-ca040f64d9f2", "sighting--21188433-4312-466f-ae53-fa9881d462e4", "sighting--6115a746-e613-44ec-9d76-6ca9b48e49d9", "sighting--1520720b-01c8-4f30-95ec-7dd8501546f6", "sighting--00fd9626-6397-4743-874a-8a1e1b04dec7", "sighting--7747d910-9812-4e20-9440-d38fb9bd0e01", "sighting--26471e8d-595e-4b8e-b33f-544c98d831e6", "sighting--f096d68e-e924-4061-93ea-a479553e9b71", "sighting--08b2c88f-886b-4425-a46d-c83c09b43798", "sighting--e7dfc442-e4b5-4282-aa31-86a6199ffc2b", "sighting--c4d491a1-ad62-4be8-91b0-bc202fcd3ed9", "sighting--6a90f1a1-a8f3-4075-bdcc-5c1de7a44586", "sighting--3c9eb5c1-0dd4-48e6-b549-9ec23e53fb87", "sighting--49003dd4-d7fa-4a39-88ed-7ee74e7a19c0", "sighting--e7957060-7579-4a23-9c34-cc3a9133c1aa", "sighting--854e77a2-abff-4125-9224-1d0a0a37d126", "sighting--1f9ac1f5-617f-40bb-ac84-036fe4af9802", "sighting--043df1e9-f78a-4e3c-be0b-8aa445039b8a", "sighting--fcc61dbc-b7e7-4a73-9189-f064ac7a32c6", "sighting--ff84fb2c-eb1e-4b31-b4d2-c151e4019a7b", "sighting--d0c92177-90ba-4635-8bfc-f1db1342303e", "sighting--086fd162-a9c5-4c22-8dd0-1a2a36283b05", "sighting--c7bc1f46-c5ba-483f-8ce1-1d376307f323", "sighting--ef05b006-40d5-432b-8ff8-cdd616c767cf", "sighting--9deda92b-f06a-47ed-a15e-76b86d84a1d6", "sighting--830cb2e5-da9b-4b37-9bbf-21741c7e3dd2", "sighting--316ca646-1f15-45a8-a847-741d6656ae9f", "sighting--ed10c2b8-0ac3-4c52-a74b-da62929eec06", "sighting--0994bfc5-4614-411f-838d-4112c0aaf4c1", "sighting--d193493a-d652-44c3-8d76-22101be63ffe", "sighting--390d0092-7500-45d5-977d-e7f5729bcdf6", "sighting--6cc09f0b-2d45-4265-94a1-65803a367871", "sighting--480987df-5b15-4a3a-8753-a0f10ec8fa88", "sighting--d12c7219-9509-4aeb-9b08-1c799ae77492", "sighting--145b1dd1-a202-45e4-bafe-9107c4ec1c84", "sighting--79f66e1a-d4d2-4e76-8f34-9c68baa5da74", "sighting--30d9f16d-e624-4d70-9e49-0967bcd75f7d", "sighting--725c3877-e948-4145-bb59-221e435f1210", "sighting--4df3a983-1acf-40b7-937b-c7a0418db40e", "sighting--736dd5bd-b3aa-44b4-87bf-952294f1c5df", "sighting--3a261aee-a987-4de0-9e5b-2c5f2ebd351d", "sighting--8c36486b-073f-4b4c-b222-b3324a840f5f", "sighting--de847b8c-c7c8-4e27-b573-0bb17d109372", "sighting--2e57fb0d-79fb-4c8f-bd2b-c0c57ad6279f", "sighting--c29c1164-6b92-468c-bec6-64517c2bd386", "sighting--5129e2d1-d53a-4f42-84e9-05d8b92cab26", "sighting--71ad5cdd-044b-4411-873f-a9210c0ee711", "sighting--d1ab6d4a-8061-4c31-9831-5fbc74283b4b", "sighting--cd11b027-e789-4aa8-9003-26dbd4264078", "sighting--8465520e-1f24-4872-934e-3e6e5a43de4e", "sighting--67e60c41-e61b-4481-ab5a-5e8e650d9ca5", "sighting--ad9bbc1a-1826-42ee-bf44-3485b10cb4f8", "sighting--eae55a74-ca4a-4e5e-9a06-e3453eb9f819", "sighting--bf85f246-c12f-49eb-8c54-32faf2bb8203", "sighting--2ae74698-fb8d-4d2c-8280-af8f02cda03d", "sighting--c73d2921-6826-402a-8fd4-0d233eaae9a5", "sighting--1b09b892-13c1-4695-940f-b90dbab12c1a", "sighting--fdba92d4-389a-4274-9691-1035e9abab5a", "sighting--cc49b2ad-9f3c-4322-a666-7e6db7eaf457", "sighting--5f94b491-1040-49e9-a1ac-4c9369aa8293", "sighting--7bd5ccaa-f334-4059-8c5c-e22783a0aa75", "sighting--66668e28-1521-454c-b11c-403f7b08794b", "sighting--64b64af2-81f5-48d6-b38a-fffc5806764f", "sighting--3d2792d7-a6ee-4a99-b93f-fcb50bf0379d", "sighting--32b979a7-5f83-4430-a699-959d57eb27e0", "sighting--84586ad7-de75-4fcf-85a3-caed4edfd86a", "sighting--9c6fe9bd-57fa-4b30-b8af-5b16214d5f21", "sighting--6f1899a5-77c4-45db-9b21-eae058547684", "sighting--c8510b04-4202-493d-ab1e-5852158ca4a7", "sighting--613fc20a-b5bb-45f7-930e-47b0f8022a9b", "sighting--2ea74026-e06e-4a13-8e9e-e9605261b734", "sighting--3da7bdcd-e01c-4139-a088-795d932d3152", "sighting--3a8b6f4f-0b4f-409b-932f-dfa412667a52", "sighting--8a630fb9-b57f-4ee7-b6cd-d60239df617c", "sighting--ff1d88b1-e634-4aaf-8b3b-e4d3cf8e52cb", "sighting--9d071043-f87c-4ffc-b788-1a9ab2e111f4", "sighting--11231333-7b4a-492b-acac-148e0a58ce25", "sighting--3f13cce9-0e4a-4267-963b-5207095f0a35", "sighting--f0fde7b1-f740-4450-84e8-d66b54fcc5da", "sighting--c92a0b70-843a-46c5-8228-5a24b3756634", "sighting--8da4a695-50e3-441e-aa88-e0dfdc0576b0", "sighting--608fb013-7977-44d8-bc66-28eb83b3af9a", "sighting--d6b75a41-4ef8-4132-bb5b-ab770bc617c0", "sighting--6a8f4637-61b6-4843-be9c-46562855d7a0", "sighting--e9a43c64-a497-4f87-85b3-c81764ee94e0", "sighting--0de4cbae-9830-4d26-a241-7b7b0f344981", "sighting--0ba185af-0a49-477e-b47c-27f40ec77bc8", "sighting--d298500a-29df-48cb-8806-74cdec154081", "sighting--2b1cd195-2ab2-4b59-a4ae-847fb6432f73", "sighting--bd9cee6f-a26c-4e61-ab11-2c0fb8245ebe", "sighting--a8875579-05fb-4aa1-9a0c-cf9a5763896a", "sighting--c8e1b592-5b9d-4ecf-9533-bcfccf2a883f", "sighting--484fb0e5-5c06-4ebb-800e-7b8325e7d081", "sighting--6bac643d-deff-4d86-b90a-edf334ccc8c7", "sighting--e9f64804-67f3-4109-a1d5-0d1f7234e9cb", "sighting--840aa828-7d9d-44df-b1cc-4c944e6a2df9", "sighting--317b7b8a-64a8-4c57-9d32-5e94151fbe4d", "sighting--4a98e975-39dc-4686-80a7-99c6cbac84ec", "sighting--798ae052-37a2-4cd5-8fa1-0186508ea3f0", "sighting--63b9a904-73e8-4b3b-abe2-2f81ce0ca174", "sighting--a58df7f0-2186-47a5-9308-f357e2bf6f3e", "sighting--6fc65a07-f9dd-4eaa-b94a-6def34017ccc", "sighting--26143c88-9011-4317-beba-9cc4b9988e9f", "sighting--d7eb37d8-49db-4db2-ac3a-c3ef5570c069", "sighting--74615307-fa5f-4a5d-82a8-81e0e2f50db8", "sighting--bef6ee82-903c-4983-afb7-7006c99ef7f8", "sighting--139cc317-8a03-4afc-a11d-b6801ebef949", "sighting--4b950715-310e-4cde-ba9a-036be7447564", "sighting--a3221438-49fa-4647-9f77-8a2fd406530a", "sighting--23e96f66-0144-43bc-826a-76fb1df820fc", "sighting--438bcb8d-6d97-437c-921d-beb4854c008c", "sighting--0903fd9c-aa55-48ec-9b76-6e4f81b4254b", "sighting--976407d3-2a49-443c-af22-fa681315a90a", "sighting--f21d42ac-302e-4b68-a2b4-c943017e7aa8", "sighting--ef327463-5dad-4297-b10f-3834754b401a", "sighting--aa3c71d9-6b3d-4097-9d16-631ecdd79a9c", "sighting--8bcf5edb-df7a-44e8-bc7e-c0ef3521030b", "sighting--9b99d6db-3d4c-4070-8f45-265d841694cb", "sighting--f2f227ef-d98d-48e5-952b-a2327e20550d", "sighting--68a2c4c9-a286-4ed3-b25a-b74191d300b1", "sighting--af5252e7-ba68-47dd-996b-27ebcf165fc9", "sighting--2b7b7009-3238-4795-8f85-ce06f3886ecc", "sighting--d489974c-8fe4-4c4e-a2ac-d2d5b7d2c68a", "sighting--ee8fc8ab-27a6-44da-a8dd-b95c91b5b16c", "sighting--fe41ab32-c725-4a9e-9899-2dbab498deb0", "sighting--46475a21-2df1-45c0-9b0d-59fb1da04635", "sighting--6bf0d14a-d48d-42cb-9e67-8b0f28d788dd", "sighting--b84e68bb-9820-482a-ad2d-abb793e3e67a", "sighting--6054fb04-51bb-419e-bd23-065afc2b004f", "sighting--4241924e-a387-4bdc-abec-848f1dcc4608", "sighting--e76e5757-fcc5-4f19-9b38-b67193841bc5", "sighting--f8694506-c7b6-4d49-a773-5a10fe6ea3c2", "sighting--f39936cf-48b0-412e-b327-8a3e22329fc6", "sighting--2b1de0d0-cb79-4893-b010-244f09ab027a", "sighting--57a24c9e-a5fb-4c37-b6d5-fd4128cba45f", "sighting--1ced774e-7446-4ce6-a3dd-5cd0e0be1ee3", "sighting--f33ab4f3-cb76-4824-bff5-0e38d4c25cf6", "sighting--42506373-3c5c-4712-881b-bb9baca960a3", "sighting--45c4e052-426c-4a91-a632-99411d21de53", "sighting--67bb225c-4efd-4d9a-ae66-36170e76af8a", "sighting--7db74373-8ce3-4de6-9c59-0135228a46fd", "sighting--dc182170-fc91-4d1f-8fa8-20ded6e9b0a5", "sighting--e423a300-954a-4ee4-a97c-37efe593f328", "sighting--168810b1-e4c6-4a2f-bf11-c70e410d9943", "sighting--bdbc05d2-d395-4e8c-a0de-33470cbf28f2", "sighting--44db7f83-4cd6-4811-bd43-7f531cf8d2d2", "sighting--ebfd345d-419f-49f9-b1a1-7ab8185d0f48", "sighting--2686b4b3-46c2-4f12-800a-7a2cc1ca0fa8", "sighting--d8eb1bde-c29c-4534-b227-8121395517bc", "sighting--71c70d7b-e681-468f-ae6d-4408817a9b14", "sighting--97c2b700-6f18-4fd2-afbb-bce0a0d02acd", "sighting--a5c239f3-0fc5-4859-88bd-47badd406d12", "sighting--778d2625-2b24-4f7d-b84f-6be2d524e746", "sighting--7324d7cd-073c-4b75-aad7-5dd48d8061f7", "sighting--3d2e0ede-ddd3-416d-ae71-18a2aecb8e53", "sighting--eb647786-d061-4063-91ed-df796f69cf85", "sighting--db359e9e-1c70-407a-9947-c9343c931f03", "sighting--4f44fb5d-bf34-40b0-94e0-cc9054e3b58f", "sighting--86dcfef0-e708-47b2-a7a6-e1256287aaa9", "sighting--0fed5b3b-9438-4143-adc9-d382f4804cc1", "sighting--6cb00798-69c3-4bde-a8d3-b813f37f83bf", "sighting--f9c3712f-b714-41c6-8277-b09199ac57b4", "sighting--08201a63-7aa3-4d59-9b4d-66bada30f5c1", "sighting--97171b54-1ed6-480a-90fa-ee78c8d82a44", "sighting--0d45a9c1-d4b4-41b3-8f63-182fd8cba73e", "sighting--dca2502d-3ca6-4c84-97dd-3330230c69be", "sighting--1980b47d-b37a-4d7d-b9c8-90d4daa7241d", "sighting--b67b14c0-6fe7-418f-9b4f-158b894842b5", "sighting--62629e24-dff3-4ce9-a7ae-0e0ad3cf4ce4", "sighting--a8450996-339a-4587-98b6-10fbd8bbf40f", "sighting--b14ccb48-d125-4af6-96ab-fbdea8a2f3e7", "sighting--15ff40e1-f2be-4798-bcc9-e241db634dab", "sighting--bc51135f-7382-41ef-a30e-29a34ac42d2f", "sighting--0fa9fbe4-0d2f-4347-8ea6-e17f3527db35", "sighting--f5946e45-06b7-420a-8360-b929f16c9c02", "sighting--67735f39-f4c8-4e51-8d76-7cf35a86b9ca", "sighting--adcc731d-7315-4c18-ac76-a272d0aac50c", "sighting--bf29dbe2-0081-4c4c-a963-426dc2f55122", "sighting--e7b8245f-844d-4bfa-b26d-6b69f713cba6", "sighting--30336037-5e32-49f6-8393-b240b0360b7e", "sighting--bf3e52db-2fb3-4bdb-869d-fe476fa29f87", "sighting--5a1dec84-6128-45fa-be0a-6bac92033d3a", "sighting--1f62d04f-b7e5-486d-a35e-86ec2012fc87", "sighting--ead538b0-53cc-4b22-9a88-948067a4f047", "sighting--9820bae0-3c8a-401b-ba7e-2cf312de725d", "sighting--35932e8b-ac06-4a96-8feb-edd28dc9571e", "sighting--92b17b92-dfe5-4cb1-b631-91e6905b2a0c", "sighting--a5f2cf13-9118-48cb-aae9-4d742aba5959", "sighting--9b664641-4392-4d15-b067-f883fc522683", "sighting--e9a7ecc3-2efe-4ddf-8f77-91be68037613", "sighting--7e27019f-7a51-4e9d-8e89-54017afc9e99", "sighting--137d57f2-a716-4270-a528-c62a0cc6b027", "sighting--70ce95e2-7e1f-4d11-9d61-57aa3e47cf8b", "sighting--afb54ebe-1a58-4f4a-b9fb-067d3d8c6f71", "sighting--1ac6397f-dec0-49b8-b2ff-b1392784e684", "sighting--ce0dd008-ce53-4aca-9ed9-2a173ed1ee84", "sighting--a1ca5478-53d6-47b7-ac7d-ca099e07c3f7", "sighting--65902857-2344-43ae-8983-3e2d1bbccdcb", "sighting--ab454c9f-53dd-4734-8f15-1cc4753b6431", "sighting--53f1b7f5-c116-43cb-839e-21abe2588a41", "sighting--a568bd54-77cc-4682-bb5b-62199dc28639", "sighting--a1ecdd54-40d5-4484-b82c-a977a8aa5bec", "sighting--0eb7dbc8-af57-4d22-a4c5-df16c0318936", "sighting--7fac003e-f3bc-4ba6-87cb-39e9e454693a", "sighting--6e79619e-6696-4c8a-9010-d8b56c8d6921", "sighting--53b26374-0a2b-4c66-b00a-a72e06964fa8", "sighting--b80789a4-1969-47b9-b074-d54d68890541", "sighting--ab97fa38-b180-4964-acde-b786c9fa0041", "sighting--02d2bf8b-b3f2-4b92-abac-b5ca1d8888e3", "sighting--7851f945-7a7b-45d9-89c2-bea53374781a", "sighting--2da444ae-311e-4df9-aed4-ffa75e9a17cb", "sighting--f360b17d-bd98-4af2-a8d9-5817aadafda2", "sighting--952055fb-7eca-470c-ad3b-0de8421ee9e4", "sighting--0d4c7dbc-0984-4328-9172-22ca9e318b05", "sighting--e74bbcc5-9fc8-45e7-b50f-2034f65f5fdd", "sighting--2afd1ba6-2507-4b17-941a-157596b145cd", "sighting--2b6ec6de-06cf-4351-9f9a-ef65748344bd", "sighting--0a111ea1-0327-4030-b19e-8da41dfefe25", "sighting--3dbdde77-b7c8-4d23-b2a6-69e3e147bad8", "sighting--225acdf6-dbd0-453d-bbe7-7befe17b79f5", "sighting--0b886e26-d4e3-4e5e-841f-8fb18c02f11b", "sighting--f8e05aba-f1ae-44d3-90d0-a1d467684aaf", "sighting--96be47c7-b419-4858-a1f0-7e7b74b9bf68", "sighting--8323bba6-0b62-4401-bb18-cf452f94e01e", "sighting--07492624-5a15-4a37-966d-719271520a0f", "sighting--76b620cf-dab6-4fc5-a153-894d3a617446", "sighting--09c42db2-a788-49f9-8fb6-4767cda52cb7", "sighting--d567e1a3-c704-4b32-bded-7d2c8d40082d", "sighting--7c464510-4336-4545-9d75-4fcf1d3dfae0", "sighting--7d5d39d2-c243-430e-9e41-3138ce9a12fa", "sighting--e0cee441-9e83-4158-9d74-a7f4b2711871", "sighting--81c91f67-79f7-4ab9-8685-aa2326c8ae87", "sighting--70c5cbd7-e55c-4711-affa-9c6129e4bd53", "sighting--06e63435-00b9-43af-a679-4839026bf680", "sighting--db7c4785-f0e0-459c-afe0-220507df498c", "sighting--71572ba4-5f6a-4c30-b33d-84dd88a7c8b7", "sighting--01ea143e-9810-48f3-a325-67dae3beecfb", "sighting--8a4556b7-9c6d-495d-a15f-d8f59f7ba22c", "sighting--9d7820d1-acab-4377-9b30-f17c8dbe53d8", "sighting--8e7fa071-95f4-4110-8e23-fb04b0b8e258", "sighting--5f64d125-d3e5-4fb8-b7e9-f9f4bc781de4", "sighting--fffbf83b-58d6-40de-a914-ba32474fa94d", "sighting--f1dcdec2-b61e-42a1-8846-11dcadf7deb3", "sighting--36aa80fc-3289-4406-acdc-76e9652e7fcb", "sighting--28041403-3499-4c3e-8cea-61d6837dadc5", "sighting--daf810b3-832c-4ca0-bc47-c5dbc962c3dc", "sighting--da725686-4225-45fc-ad2e-12fae8ae67f5", "sighting--907cca18-01b8-48ba-9142-67e00488aada", "sighting--07833ecd-6838-4ffa-b3c5-6923f5051994", "sighting--ece59be8-8583-44b4-a414-99238ef33dce", "sighting--f0eb9beb-0b88-4225-82f7-fc07bc942f2f", "sighting--f8065781-0219-4c1f-b18c-63a8aecaa293", "sighting--3e86a555-8e83-46d5-a9a6-06a9023a6f7b", "sighting--1377b27c-7d71-4f29-8026-d59252008258", "sighting--bedc26a6-7b82-48f3-85f4-ddbf53129cf6", "sighting--9d3834c0-95c3-4edc-928a-29655d3b8180", "sighting--c61f14bf-5440-45d9-8efb-2c3ff8f87132", "sighting--2fd37356-383f-4e1b-8258-c92002ee2af3", "sighting--f88da582-ab2a-42b6-80ee-92b0b94d37a5", "sighting--ab168ea8-e6dc-4521-9f49-11196be5c940", "sighting--153fc793-9a02-47b0-af52-15f38310dcf0", "sighting--543ebdef-4e0b-4824-86ba-7a0aa09db0e4", "sighting--f7445c09-f18a-438b-b5f8-995be2d7f82a", "sighting--9faad0cb-db63-48d2-949c-830e6ff64d96", "sighting--b58ec34a-345d-49e7-b898-c76f8ab6eae3", "sighting--586df1cd-1e5c-4505-9ed5-fd3280ec0d20", "sighting--7117ca7c-97ba-4544-bd5e-c3402ff01c62", "sighting--e4b051ee-440b-4b35-b3ca-7811cd057ffc", "sighting--84e58dc8-2d32-4b3a-8c53-e5a9e488b6ed", "sighting--6eafc741-5fbe-44d1-9ccd-5c85d042434a", "sighting--967078b9-a674-4bd5-972f-3683b390a1f1", "sighting--163db478-19de-4c15-bab3-f3d7dd397ca2", "sighting--bf4441d9-b51c-478f-9235-77f97f67631a", "sighting--b9f27057-dd81-44ff-a93d-40ca90a10c58", "sighting--73d09605-b730-4588-8e27-a129c8b94977", "sighting--e762d3d9-fa00-47b2-8fa3-a4f2186a8135", "sighting--d9770b8e-9eda-4046-adb0-fe5ae5bbbaf0", "sighting--6c0a1964-f909-45ff-a12b-0af9ca7540cb", "sighting--fe1f0fa2-f632-4a02-8873-6d76b1cbb6f1", "sighting--22377146-d9d6-4327-8415-af952a8235ff", "sighting--e06a0d10-b498-490c-8996-a6bde074a142", "sighting--dfc9cf1f-92a2-4871-800e-5f46bfd11392", "sighting--9da8443c-ab7d-4564-a434-bf3c2fa52289", "sighting--dd2177aa-788e-4367-a5ff-ed9b4538dc9e", "sighting--2551c190-2ed4-4b1e-a414-ea9e400ed953", "sighting--675a7194-6d93-4ba3-ab37-a8e497e6de1e", "sighting--2a357935-9281-4370-b64c-24d2f8c65ede", "sighting--dc79b822-aa94-463d-918a-155cf373d278", "sighting--b000f4a4-7ae7-4046-927a-4992d1815b3d", "sighting--6e4a1de8-bcb9-4bf1-97d9-631dcccb8e2b", "sighting--6bc75ad2-bc08-4739-a009-009dd9d08f4f", "sighting--41bb7363-72b0-4e17-be16-a4536535d7d7", "sighting--d124b42d-42fd-420b-a2ae-cba074cb55ff", "sighting--0bbea9c6-b292-42d1-9b21-3e72eace27c3", "sighting--55fa9cd2-d5ac-41c3-ae7a-e2011844c915", "sighting--eeaa4211-1546-47b4-aa05-9af63e352635", "sighting--795d8011-1ce1-47e4-9f99-5df14097ceec", "sighting--18615cf3-7906-4e47-b8b2-bc84fd5d435b", "sighting--c3ad7be4-7e1c-4225-94f7-028adc4e249a", "sighting--eed899ee-fde0-4d07-962a-f8b7b172d4b3", "sighting--f8a76517-3407-4fff-a5d7-8ad21ac1d00d", "sighting--81551284-27ac-49e0-a83d-55cb372387b0", "sighting--2070604b-8fc8-4507-8dd5-c655be148c91", "sighting--3c654acc-718a-4496-8249-b9b9373bf022", "sighting--3d67dd23-6572-4fcd-9ec7-3329dae63057", "sighting--afe841e5-403d-4d05-995f-1137c39b07d8", "sighting--417dfac8-e7bc-4940-b3fd-30c22c4dff7d", "sighting--effcd07f-1058-4140-b10d-c84a3435d5a9", "sighting--d005bdb8-ed9e-456c-945f-a5e32f990c92", "sighting--e4d07ec0-fd40-42df-b5c4-6803c38b1101", "sighting--61ea1311-878d-457b-af48-d4a2a016f742", "sighting--41d2abfe-5399-4a7c-a681-2c9f421dca53", "sighting--261df481-566f-45dd-a8c3-4ec0036be8ee", "sighting--27d8ac57-fdfe-4f08-aece-5e11e30d8315", "sighting--bf2a3ca2-2177-42fe-adec-f65d5bacb091", "sighting--dd797682-cddd-4592-8644-17985cc0b702", "sighting--0fb93afe-ca81-4256-80e8-9038fe3754e0", "sighting--4bc8edb0-6894-4892-8d11-b58b13d7aafb", "sighting--dd08b58d-ae1c-4fc1-acda-28ea74bc82ae", "sighting--c02f3756-3b72-4c2e-8c91-209f5ce1c688", "sighting--055ecb9d-0ef5-4321-a9bb-94310b443d2c", "sighting--74294028-5fbd-4ae8-b211-3797db48f68f", "sighting--f8e7239f-accb-4e20-8f17-cf4d51852a5b", "sighting--07b0ef40-f967-4e1a-a829-864780469b20", "sighting--d1f5706a-00f3-4614-94a4-258a4853f0e2", "sighting--0c9b7547-a375-4877-b258-b264c1e53591", "sighting--d1d996e4-5330-442a-ab63-6b8a23c841ed", "sighting--a038db3e-f111-45ab-bf32-8cba5ddd4cbc", "sighting--438d505d-4117-4621-a41b-c4e53fe6462d", "sighting--94c68791-d99b-4c6e-9d65-7a1921892e93", "sighting--1b3a5e71-2156-41cc-9f67-afe234529d01", "sighting--81dd12ee-f947-46c3-8521-55b22a06c5cd", "sighting--e8a43814-f0cc-44c1-9ce0-12aba062597c", "sighting--3761c14d-d082-4f92-beeb-612f56de9fde", "sighting--03dd1dbc-9aaa-4de3-b1d3-0430176dc51e", "sighting--779a352d-946c-4958-afad-762a30ecf9fe", "sighting--4e734e69-4d6b-4f79-ab6c-fb70746f994d", "sighting--5a963f28-2936-453b-9654-6a349489d9e0", "sighting--3265f886-3eaf-4abd-ac7c-667ad76849a8", "sighting--1453a2d5-b27e-420f-b9fd-c3158abd2448", "sighting--940ef6e2-cc76-4b5a-abe6-3029a98f7328", "sighting--0022bca4-7ea0-4bcb-a531-dea36e665410", "sighting--30dd02ea-f7cd-4504-80e6-7cba7ac02a49", "sighting--31442335-11b3-4bee-8b5c-392243453a7f", "sighting--17510fdc-97d3-43d0-9a1f-80bd2f34333e", "sighting--c2becc99-c99c-4444-825a-b877bff756a0", "sighting--7d89bbe4-cbef-4c5a-b2b7-4d87bba55bd2", "sighting--e4211732-bd97-44e9-8e8d-1799764421c4", "sighting--b0ffe086-d1e1-46aa-8f78-42aa12bd9a81", "sighting--a987db81-4a24-48f4-95bf-e66e31360a16", "sighting--604b25c7-fe31-43ba-b04b-9fddb8e2a755", "sighting--9a3f6a72-19b8-4786-8368-5292a5419cbe", "sighting--6a9e475b-4037-4c73-b841-5569fd545337", "sighting--715e93b1-2534-4460-88ef-7c89d3fb16f0", "sighting--9512491b-5a07-430b-af60-7aeccf1d5133", "sighting--89e7b8cf-2a39-47d4-b59c-4f8d76e8b43d", "sighting--0ccbccb8-8d34-4172-b5ba-1757123976c2", "sighting--60d2d967-0abf-4ef5-aa82-cdf842f35633", "sighting--c8e4cfa6-7459-4160-8b9f-2367f7bd531a", "sighting--3a00f979-380a-41b2-8cd3-19dbff6ed3de", "sighting--39a759a7-b33c-4b00-ac9a-6266977a3a5d", "sighting--81062058-9d3e-4c49-95ad-e7f020d5d8a0", "sighting--3d95d80e-d276-4c03-bbf8-74734e3aec47", "sighting--4124f635-5af1-4832-a757-dbc9969ea8d6", "sighting--f48d9f00-50fb-4025-b438-71f24442f73c", "sighting--6394d2b7-4835-4166-a40e-db9683b294f0", "sighting--07064a9b-afd5-40ed-b635-a02a79218d72", "sighting--5ed95c6a-811c-4e64-a36d-85c87e8d6c5d", "sighting--af91ea68-748c-48af-9130-b33ebe514cb7", "sighting--3d0054b1-4daa-43d1-a11a-09955a4741eb", "sighting--91653169-83d1-4f63-90d8-82272bc755f0", "sighting--cb3349a2-a8db-4981-9d4e-abab1d3cd66c", "sighting--ee8e3956-ce79-425a-9780-66b846a54109", "sighting--75ada8bf-bf81-4226-b789-77d2e4563d32", "sighting--602fc6bb-7f5c-432f-9302-b50dc531a7d8", "sighting--51d6f818-1244-4799-897e-839723cf4586", "sighting--2bcf737a-e892-4463-be45-f4b5d334fcd2", "sighting--5e84c9bb-98d6-4508-9515-14b79007f8a1", "sighting--40916b00-1b91-435e-8be1-3be9a6321c11", "sighting--3ff3b049-bc9d-48df-8405-baa3be4ca6c0", "sighting--2278585c-65ca-43bd-a455-743a7462f03b", "sighting--938d4e1d-3ec8-49fc-b089-f8c025e6a7bd", "sighting--9120d00c-e5a3-46f5-8fc4-577a383ce50e", "sighting--975b6cc9-d5a3-4226-8027-a223212f7a8a", "sighting--ac2b333d-1b3b-4dcf-8643-3f1752e5e7d6", "sighting--2918d1d4-201b-4a8b-92cf-094644f256c7", "sighting--9d4e78d8-c5bc-4bdc-ba87-b3967376746f", "sighting--1d2b048a-4e3d-4894-9eb9-0282fe5329e6", "sighting--750d9a10-07f9-4b7c-95b2-f5d673a6c09f", "sighting--21588143-0062-4793-9b90-01ebf2c266dc", "sighting--f70be825-52c2-4c70-8c55-d2151dc48624", "sighting--77025a51-6d41-43cd-a49b-698e63eb312f", "sighting--898c78e6-d455-4c09-8a16-464fa4b64b10", "sighting--a3eb0772-6b16-4731-b1b8-bc9b5c16df6f", "sighting--8a5c1ca7-a7a0-4f1b-aea3-9ed99cd5d7b1", "sighting--be52ef50-c8a4-4497-b795-c206df5ec623", "sighting--3aa215de-9fe6-4e51-9cdd-292418335818", "sighting--0b78354e-2a94-4538-8a24-71c8f477b211", "sighting--01184465-1aad-46cd-abdf-d7e194574baf", "sighting--55e572c0-125d-4121-b3a0-62d37de5df16", "sighting--8cd678d1-905a-46a8-87a3-0c754fa43028", "sighting--247d49f8-db17-4c1c-912f-d33e68803ee6", "sighting--b65c027b-46f4-40df-a6ff-c40076f81389", "sighting--f2e65785-8bc3-4075-95ca-c11edf8d93c6", "sighting--c287e3f2-d75a-43b8-97af-353409093699", "sighting--ea94dcd7-781b-42e5-b949-0120e2de77a0", "sighting--a79388b0-b614-424d-b499-039c15585524", "sighting--16f93475-8c10-42ec-86bc-141c8165a24d", "sighting--92bfb078-e3bc-4423-af9d-2fa2a7bacf6a", "sighting--cfc10a9d-8720-47a7-95b4-4c6b80ee4dea", "sighting--916d2af2-7556-4f94-9329-50b7ddb60f85", "sighting--b5505c80-e35e-4a42-aa18-19f5a8493eb6", "sighting--26982977-a661-4125-8e47-27ee1bf14904", "sighting--85e5f906-6da0-4240-87ed-6340a81c48cc", "sighting--07fbaa73-a6f0-4152-9de3-bf63b56300f9", "sighting--7636fdeb-682c-4a53-a247-aee134a0b711", "sighting--9e4fee90-64e1-4420-97cb-cb3c325afcd2", "sighting--b6562ae7-f0a1-442e-967f-2a2df89b9874", "sighting--289e5b4f-c3de-4cfe-8bb9-5cc2158ba8d3", "sighting--1a157efa-9065-4b78-b8b7-4c399b3f18f2", "sighting--5be39c8e-6415-4373-a687-1decf1c1eb89", "sighting--c195eecd-e02b-405c-a79b-174a4d3bd353", "sighting--937445d1-d21d-4a09-ac18-da5d9f4d6f73", "sighting--9c78f9a0-5e50-429b-b94e-99c037ba9018", "sighting--9b36ef42-e702-417b-bc01-fe7dd3d12ecc", "sighting--e72d038c-6b9f-4467-8577-fdd1546dc5f7", "sighting--675ab3b0-6b70-4b81-9653-fc417dded3c9", "sighting--574d0470-4438-4386-8177-900dc44ed10a", "sighting--4818079e-1710-46f4-a29d-39d4a18894b5", "sighting--babe7456-db0f-4a66-8784-27a877cca94b", "sighting--4c01be90-2647-40db-86df-3791e4470b81", "sighting--ae1e68d3-c3de-49dc-a1b3-facf0e1e0c62", "sighting--1d88c48c-996f-404e-8ed7-41730386d745", "sighting--7f9322e4-da17-4874-9df6-24bf695b6305", "sighting--ef1e984c-a331-481d-b5ac-a1c0d195addc", "sighting--50ba79b3-0e23-46af-9244-93065e015000", "sighting--1a80c6af-968e-44c8-b8c5-93f4012c27e6", "sighting--ad7ff059-3489-413d-8669-93bce25d502b", "sighting--0e1f991e-9947-4138-ae36-ab0bea90913d", "sighting--e54a061a-ede1-41eb-af17-6366e126acf4", "sighting--4454a27e-8df3-44ef-8073-c20cd974fe1a", "sighting--4683ff81-1f8c-4102-b6c1-6358837ee7fc", "sighting--0e3907f2-843f-42d8-89b6-a7d7b8cca517", "sighting--3598ad54-5097-4d43-9c14-b819f295ff8c", "sighting--37810e38-4ceb-46ac-a629-48617053e981", "sighting--b89898cc-c20a-4d8f-95d7-0db969f5897e", "sighting--f5283a52-a03c-4e00-8b46-28add93e5409", "sighting--b782bce8-33f2-488e-8497-1a032c94ab58", "sighting--d19b12b5-84b2-4aa1-9356-762fa585a4ac", "sighting--6eb6f63b-d411-4ab6-858f-e3e00783f1de", "sighting--75d3a6bf-4998-4cd7-9511-cf4e77e15641", "sighting--54d15422-e558-479d-b04a-26972b52fe9f", "sighting--593b610c-5447-4023-b403-e96e080c5538", "sighting--b1225e6b-5dda-4071-b01d-85b36c90a1ba", "sighting--f80f733d-036e-4124-8809-c308906ee1c6", "sighting--d1ab49dc-c64e-4ef8-bbd1-2ef6d4d8d972", "sighting--f091a635-738e-4f4f-a740-82af9981d36d", "sighting--b191b882-27aa-499f-b3ff-bb960722bb98", "sighting--baa2d85e-4e90-4dd4-97db-732f6400e714", "sighting--ce486a0b-fb64-47b9-b76d-3f445326a452", "sighting--c9a82b29-c8b8-455e-9f47-59dc9ac92a20", "sighting--1175aa11-de4d-47ad-a5a2-890b9de1b289", "sighting--30ba6a19-066d-4f0b-8c80-201485a72c86", "sighting--d9428b0f-8a41-49d3-aa59-253458bb2855", "sighting--a729204e-e189-4057-904e-7fa2922a88f9", "sighting--3f94e049-4d25-4781-a4e2-d0f6f1bebb5d", "sighting--d23f7984-070f-4e11-8776-9ace99645ea0", "sighting--6526cca8-f06f-4bec-ab93-d4443d97da7a", "sighting--fa2924da-0615-4dc1-80c9-289ad6816fcf", "sighting--d03d3d76-8da2-419c-a6d5-b6cf71972b89", "sighting--5fa47623-fd44-47d3-ad3e-19156feda366", "sighting--72b54af9-24f5-4ac8-97b3-adc118835dbc", "sighting--f65800a4-aacc-4bb7-a543-c2bef2abdaac", "sighting--7888c1d4-a3b7-4aff-b99b-3e4afd6619fe", "sighting--12e4405f-1d22-4676-9954-9386e642c6b0", "sighting--5891f8e8-7744-4da7-bd32-fc3926af462c", "sighting--07c4f40f-4c04-447f-97b7-241054e593e9", "sighting--9f464ea8-114d-42b3-a13a-d6979ae2082f", "sighting--a2d19fd2-f3ca-44b2-9983-2c4419b682a2", "sighting--b114cedb-e4ab-4d56-a4f1-ffd875bcbbe0", "sighting--282142d7-8c95-4b74-90e7-1dfc4a4ce4ff", "sighting--94f4837b-8142-47df-a013-5ebd8ba46d73", "sighting--d5d605de-d020-4e0c-8d60-729fcd20114c", "sighting--65724fb7-f9c7-431b-a207-1e584646fe82", "sighting--773e088f-e115-44f1-8a79-262765da0ed3", "sighting--ae825c09-c1b9-4675-88cb-c41d16460a08", "sighting--faff05df-f929-4ad5-a046-a494aafc8798", "sighting--c10d2132-a76a-478d-b05d-e4beeada77c0", "sighting--d508ff4c-1344-4c4d-b906-593556d409e1", "sighting--71547b3e-685f-47cb-ba18-b002713b3e02", "sighting--a8937c95-34ea-41d2-918f-47ce53c48bc0", "sighting--4fd41c78-faf8-4503-931f-e344a5d9cbcc", "sighting--6380895c-7078-4854-a9da-ec0f170974d9", "sighting--e91a4fce-eed0-482b-8360-9a0cc58e4410", "sighting--49394df2-0e29-4c77-9fcc-9afed2b442bc", "sighting--1e769e69-51a2-4744-b600-8074e66ba23e", "sighting--4203e272-fc9e-43f9-a720-5a433f2f525a", "sighting--032a85c2-425c-4753-8b97-2e419e48f8fe", "sighting--b9607c08-b893-4c17-a1cd-e1b56820e404", "sighting--75195470-2233-4a3a-b5cc-e37cd152a757", "sighting--b3597373-db00-47e6-aca2-6416fed5981d", "sighting--3996b8fa-4237-4baf-b2a0-36bce1b6c602", "sighting--d5765987-132a-405f-b9e1-4f2a211eb3b4", "sighting--49be5eef-2310-4b4b-9d3b-5456d1c1536a", "sighting--5e770e7b-3128-40f0-ac81-85480f467cc5", "sighting--79a018c6-911a-49e6-89a7-77fb1c8fac2e", "sighting--fbe5a502-9855-4cd0-8d73-d69f1aabcbfb", "sighting--d68ffc40-700a-438f-88f8-4f211801075f", "sighting--e6d56ea9-047f-4d45-b361-46fcbb0a035f", "sighting--c6dbaf33-f703-4cfc-8e84-2f2f7abdca31", "sighting--a53b050b-5b63-4c93-a2a4-90e75efa3916", "sighting--c81366a6-565c-4846-a798-7b8c0330034f", "sighting--6fe9d274-3f81-4c4d-a7d4-20333bca9b99", "sighting--af3d1ef9-ee08-409d-84ea-96c1dc14e5e1", "sighting--acf078d0-0c53-4116-b401-5d2e190546aa", "sighting--f01ec62e-5433-4549-8d07-63df35962cf8", "sighting--94b1cba5-b8b9-46b3-bb9b-0004013e3c7e", "sighting--81de74ae-a11d-46c5-b6f4-1791400f24ea", "sighting--7f98b1b6-0e85-48a9-a5a1-c5d40a0e81a7", "sighting--fd95fdf6-904e-4e4b-accf-10f85466145e", "sighting--b0ee73fe-43e9-4035-879e-99643d7b25fa", "sighting--4f2c8b27-ae8e-413f-be0e-1c544bd2a6c3", "sighting--6d818c6f-8d15-4669-92a4-db6703869370", "sighting--d9826a58-28dc-4eb9-ae63-4f6a973327dd", "sighting--eb65dfa7-6eca-4d24-bbf4-fbb84e4be45e", "sighting--d9cbfc15-acc2-4a4d-8c86-d9bc90cdaaa7", "sighting--15658fac-25d0-4c79-93cd-742faf4297ca", "sighting--0d547e8f-b9e3-4bf1-acb3-11377842d35e", "sighting--cce470de-45c0-4893-a543-24ab627071e0", "sighting--66a2d502-ae8c-470c-9f62-4ef60e56b668", "sighting--45c6b1bd-8353-4258-baaa-9ee1226079eb", "sighting--b7706a07-e6eb-4c6e-b66f-ef34fa1823a3", "sighting--eb537f55-243d-4281-b260-3de655ad3328", "sighting--d237614b-a2fe-4fed-a422-e8bbc4159a06", "sighting--afd1c6d0-2265-489f-9317-8ce256dab87f", "sighting--82fd4ac8-c411-420f-bfb9-ee928b974d8f", "sighting--4e207047-0d9d-4a51-a241-40414f08af16", "sighting--a22838e8-4f95-45c4-8d0d-1844edbf0c65", "sighting--0508da50-b876-4db0-8f06-341cc453d625", "sighting--13e7ba2d-2d22-4f15-92a1-f675d2a02b9e", "sighting--7327e5b3-20d1-4e08-aae0-540a3e6e9c98", "sighting--6bf0e6d2-ff1f-4f0c-8af7-0e355a8367ab", "sighting--7a280bdf-979e-4a9f-b841-4789f2e2efb5", "sighting--4512fb65-1421-4835-86f3-8199973e982c", "sighting--3d982805-b5a7-41e4-93cb-ac5273e4fb58", "sighting--d03c9b8e-f074-443b-b13c-3d60a5e47233", "sighting--b6feb487-a253-4369-98d5-b77cb73d9099", "sighting--660525b4-edb5-40a5-9d89-7f64448add66", "sighting--d4c47684-99b2-42c9-816a-3e6b8692a571", "sighting--61182bde-fd95-40f8-bdd6-e088f43b3d97", "sighting--69b36d52-8280-41cc-b795-be13d16fe24c", "sighting--480b233d-1306-4009-a402-4d17b3b3ec38", "sighting--a96ebb38-2053-42ee-9445-184e718cb7c3", "sighting--67c46b54-4a63-45df-bfd6-0e3c96afd73f", "sighting--a1dc13e7-d0ae-4d37-aa9c-3cb47943eb3c", "sighting--3bb2afd8-0610-43e3-8209-7d2ac94c06a6", "sighting--7c69aba7-8353-4314-a6d3-19e833bd5816", "sighting--d3dca54a-3186-4cca-8c8e-4cf8c2a9a8f4", "sighting--8baa4e6c-644e-48fb-bf14-fc06b45d4250", "sighting--6b366f7d-a011-43b5-bb2e-cd2d993e5138", "sighting--4fb44e6d-9dd1-4eb4-91b5-6df434afd252", "sighting--1a21d69f-47c1-48c5-9372-82cbe5853767", "sighting--f7c3557a-20f0-4267-9d73-f2b16c2ca718", "sighting--b590dc10-7a51-4a2f-b448-6d237ce7dea1", "sighting--d0f7b4db-9947-4147-9a8a-74a49aa6d0f3", "sighting--e0e8ebe6-2e7b-45da-97c2-f5fbc0113a43", "sighting--2f5d1eda-85f2-4df2-9d9b-81962eadf61f", "sighting--1d8c718b-3540-474d-a373-539d6be28c0a", "sighting--5f875cfc-aef0-42e7-bf0f-126213e079f7", "sighting--c03e8e13-bd07-4b28-891d-0f72418afe56", "sighting--582e5f9e-73c2-49d8-abad-e30fa47661d3", "sighting--3149f0b9-90f2-4d51-99de-40d2a1ec6186", "sighting--846226a2-4e70-4eb5-bb07-742802fdab7a"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-08-23T11:00:01.863Z", "modified": "2026-08-23T11:00:01.863Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}